Under the UK GDPR, an individual has a specific set of rights over their personal data.

Core UK GDPR individual rights

These are the rights that are classed as an individual’s (data subject’s) rights under the UK GDPR:

  1. Right to be informed
    • To be told how and why their personal data is collected and used, usually via a privacy notice.
  1. Right of access
    • To obtain confirmation that their data is being processed and to receive a copy of that personal data.
  1. Right to rectification
    • To have inaccurate personal data corrected and incomplete data completed.
  1. Right to erasure (“right to be forgotten”)
    • To have personal data deleted in certain circumstances (for example, where it is no longer needed or consent is withdrawn and no other legal basis applies).
  1. Right to restrict processing
    • To limit how their data is used (for example while its accuracy is being checked or where the individual has objected).
  1. Right to data portability
    • To receive their personal data in a structured, commonly used, machine‑readable format and have it transmitted to another controller where technically feasible.
  1. Right to object
    • To object to certain types of processing, such as direct marketing or processing based on legitimate interests or public task, in defined circumstances.
  1. Rights related to automated decision‑making, including profiling
    • To not be subject to a decision based solely on automated processing (including profiling) that produces legal or similarly significant effects, and to seek human review and challenge such decisions.

Some sources also highlight additional connected entitlements, such as the right to withdraw consent and the right to complain to the Information Commissioner, but the core “individual rights under UK GDPR” normally refer to the eight above.

If you share the exact options in your “selection below”, I can map each one clearly to whether it is or is not an individual right under UK GDPR.