Under GDPR, recipients have several rights, including:
The right to access their personal data The right to correct incorrect data The right to be forgotten The right to restrict processing The right to data portability The right to object to processing
Businesses must be aware of these rights and have procedures in place to address such requests.