w Data Subject Rights: The GDPR provides individuals, referred to as “data subjects,” with a number of rights, including the right to access their personal data, the right to have it corrected, the right to have it erased (the “right to be forgotten”), and the right to data portability, among other things.
Consent: Before processing an individual's personal data, organisations must seek that person's explicit and unequivocal consent. Informed, specific, voluntary, and revocable consent is required.
Data Protection Officers (DPOs): Some organisations must designate a Data Protection Officer, who is in charge of ensuring GDPR compliance throughout the organisation.
Unless the breach is urgent, organisations must notify the appropriate supervisory authority of data breaches within 72 hours of becoming aware of them.
Know more :
https://medium.com/@theknowledgeacademy/the-general-data-protection-regulation-d46f8142072e
