Right to access information
You can ask what personal data of yours is being processed, and details of the processing — including which other organisations it's been shared with.
Right to correction, completion, and updating
You can ask for inaccurate personal data to be corrected, incomplete data to be completed, and outdated data to be updated.
Right to erasure
You can request your personal data be erased — unless the organisation needs to keep it for the original purpose, or another law requires retention.
Right to grievance redressal
You're entitled to a readily available way to raise a complaint about how your data is being handled.
Right to nominate
You can nominate someone else to exercise your rights on your behalf, in the event of your death or incapacity.
Your duties, too
Rights come with a few responsibilities. The Act asks Data Principals to comply with applicable laws, avoid impersonating anyone else, avoid suppressing material facts when dealing with the State, steer clear of false or frivolous complaints, and provide genuinely authentic information when exercising correction or erasure rights.