Which of the following is NOT an explicit right granted to data subjects under the GDPR?

Which of the following is NOT an explicit right granted to data subjects under the GDPR?

A. The right to request access to the personal data a controller holds about them.

B. The right to request the deletion of data a controller holds about them.

C. The right to opt-out of the sale of their personal data to third parties.

D. The right to request restriction of processing of personal data, under certain scenarios.

View Answer

Answer: C

Explanation:

Under the GDPR, the following rights are explicitly granted to data subjects:

A. The right to request access to the personal data a controller holds about them.

B. The right to request the deletion of data a controller holds about them (often referred to as the "right to be forgotten").

D. The right to request restriction of processing of personal data, under certain scenarios.

However:

C. The right to opt-out of the sale of their personal data to third parties is not an explicit right under the GDPR. This right is more commonly associated with the California Consumer Privacy Act (CCPA) rather than the GDPR.

Therefore, the correct answer is:

C. The right to opt-out of the sale of their personal data to third parties.