Data subject rights processing involves handling requests from individuals to access, delete, or modify their data. Which option best describes it?

Data subject rights processing involves handling requests from individuals to access, delete, or modify their data. Which option best describes it?

• A. Involves processing general preferences for personalization.
• B. Involves archiving all data without user interaction.
• C. Involves handling requests from individuals to access, delete, or modify their data.
• D. Involves only technical backups.

Answer: (C)

Handling data subject rights requests involves responding to individuals who want to access, delete, or modify their personal data. This is about fulfilling the rights granted to people under data protection laws—like the right to view what data you hold, the right to have data corrected, and the right to have data erased or restricted. It requires systems and processes to locate a person’s data across all repositories, verify identity, and provide or delete data as requested, usually within a regulated timeframe. The other options don’t fit this concept. One describes tailoring general preferences for personalization, which is about marketing or user experience rather than rights management. Another describes archiving data without user interaction, which bypasses the user’s ability to exercise their rights. The last describes technical backups, which are about data preservation, not responding to or processing individual rights requests.

Handling data subject rights requests involves responding to individuals who want to access, delete, or modify their personal data. This is about fulfilling the rights granted to people under data protection laws—like the right to view what data you hold, the right to have data corrected, and the right to have data erased or restricted. It requires systems and processes to locate a person’s data across all repositories, verify identity, and provide or delete data as requested, usually within a regulated timeframe.

The other options don’t fit this concept. One describes tailoring general preferences for personalization, which is about marketing or user experience rather than rights management. Another describes archiving data without user interaction, which bypasses the user’s ability to exercise their rights. The last describes technical backups, which are about data preservation, not responding to or processing individual rights requests.