An organization is implementing a privacy program in accordance with GDPR. Which TWO of the following are data subject rights under GDPR? (Select TWO.)
Trap 1: Right to transfer
Not a standard GDPR right; the correct term is data portability.
Trap 2: Right to be informed
This is a GDPR right, but it is not listed as one of the two correct options in this question.
Trap 3: Right to be forgotten
Incorrect. Although the right to be forgotten (erasure) is a GDPR right, it is not one of the two selected correct options in this question.
- A
Right to transfer
Why wrong: Not a standard GDPR right; the correct term is data portability.
- B
Right to data portability
Data subjects can obtain and reuse their personal data across services.
- C
Right to rectification
Correct. The right to rectification allows data subjects to have inaccurate personal data corrected without undue delay.
- D
Right to be informed
Why wrong: This is a GDPR right, but it is not listed as one of the two correct options in this question.
- E
Right to be forgotten
Why wrong: Incorrect. Although the right to be forgotten (erasure) is a GDPR right, it is not one of the two selected correct options in this question.