Individuals have several rights under GDPR, including the right to access their personal data, the right to rectification, the right to erasure (also known as the right to be forgotten), and the right to data portability. These rights empower individuals to have greater control over their personal data.