Data Subject Rights

Data subject rights are the legal entitlements that individuals hold over their personal data, such as the right to access it, correct it, have it deleted, restrict its use, object to certain processing, and receive a copy in a portable format. Laws including the EU's General Data Protection Regulation (GDPR) and California's Consumer Privacy Act (CCPA) require organizations to build processes that can honor these requests within fixed deadlines. For AI governance, this matters because training data, model outputs, and retained prompts can all contain personal information, and it can be technically hard to locate or remove one person's data from a trained model. Compliance teams need to plan for these requests before they arrive.

1 item