In an increasingly digitalised world, the protection of personal data has become a priority issue for citizens and businesses alike. The Spanish Data Protection Agency (AEPD) has launched a new information campaign to raise awareness of the importance of exercising data protection rights. Through its recent publication on LinkedIn, the AEPD has reminded users and data controllers of the importance of knowing and applying these rights, which are fundamental for privacy and security in the digital environment.
What data protection rights do citizens have?
The AEPD stresses that all citizens have rights over their personal data, recognised by the General Data Protection Regulation (GDPR) and the Organic Law on Data Protection and Guarantee of Digital Rights (LOPDGDD). These rights are:
- Derecho de Acceso (Right of access): It allows citizens to find out whether an organisation is processing their personal data, and if so, to access this data and obtain information about its processing.
- Derecho de Rectificación (Right of Rectification): The right to correct inaccurate or incomplete personal data that an organisation may hold about an individual.
- Derecho de Supresión (Derecho al Olvido) / Right of Deletion (Right to be Forgotten): Allows you to request the deletion of personal data when it is no longer necessary for the purposes for which it was collected, among other circumstances.
- Derecho a la Limitación del Tratamiento (Right to Restriction of Processing): This right allows the citizen to request the restriction of the processing of his or her personal data, for example, while the accuracy of the data is being verified.
- Derecho de Portabilidad (Right of portability): Facilitates the receipt of personal data in a structured and commonly used format and their transmission to another data controller.
- Derecho de Oposición (Right of Opposition): Allows citizens to object to the processing of their personal data in certain circumstances, such as in the case of direct marketing.
- Derecho a no ser objeto de decisiones automatizadas (Right not to be subject to automated decisions): Ensures that the citizen is not subject to decisions based solely on automated processing of his or her data, including profiling, which produce legal effects or significantly affect him or her in a similar way.
How to exercise these rights
The AEPD provides citizens with the necessary tools to exercise these rights through its website. It provides detailed information and specific forms that allow users to request companies and organisations to exercise their rights effectively. This process is key to ensuring that personal data are processed in accordance with the law and respecting the privacy of individuals.
Relevance for companies and data controllers
On the other hand, the AEPD reminds companies and other data controllers that they must be prepared to respond to citizens’ requests regarding their rights. Failure to respond adequately or refusal to comply with these rights can result in significant penalties, as well as damage to the company’s reputation.
It is essential that organisations implement clear policies and procedures to enable them to handle requests for data protection rights efficiently and in accordance with the law. Staff training and the use of appropriate data management tools are essential to ensure compliance.
Conclusion
The AEPD’s initiative underlines the importance of being informed and proactive in the protection of personal data, both for citizens and organisations. Knowing and exercising data protection rights is crucial to maintaining privacy and security in an increasingly complex digital world.
For more information on how to exercise your data protection rights, you can visit the official website of the AEPD. aquí.
This publication does not constitute legal advice.
_____
How can we help you from LAW4DIGITAL?
At LAW4DIGITAL we are lawyers specialized in digital businesses. We provide comprehensive legal advice to digital companies. We help you with online legal advice.
We will keep you updated on digital business. In any case, you can contact us by mail addressed to hola@law4digital.comby calling (+34) 931 444 820 or by filling out our form at law4digital.com.
We are waiting for you in the next post!
Law4Digital team.