Keep control of your personal data
4 min to read

Keep control of your personal data

28 May 2016

The new personal data regulation is good news for individuals – as there will be more and strengthened rights. This is, for instance, the right to rectification, deletion and blocking of your personal data and the right to data portability. In short, this means overall that you to a higher degree can keep control of your personal data, and ultimately you will feel more confident when giving your personal data to others.

In this blog post, I will elaborate on what these rights will mean for the individual and under which circumstances you as an individual is entitled to exercise them.

The right to rectification

The right to have your personal data rectified entails that you can have your personal data rectified which, for example, a company has registered about you, if your personal data are incorrect, or if they are incomplete. This scenario may become relevant, if you is listed with a wrong address at Post Danmark, or if your insurance company has got possession of incorrect information about your health conditions and consequently has increased your premium.

The right to deletion (“the right to be forgotten”)

The right to deletion – popularly called the right to be forgotten – entails that you can demand that your personal data are released to you, for instance, from the company which processes them, and at the same time demand that the company deletes your personal data.

Furthermore, the company which has made your personal data publicly available (e.g. on the internet) is obliged to inform others which process the data that you have requested the data to be deleted. For example, if you have requested Google to delete an old school photo of you which turns up when you google your name, Google must delete both this photo from its search results and take all reasonable precautions to ensure that all those who have had access to the photo and who now use it are told that you wish the photo deleted.

However, no right without an exception: This right may be limited if, among other things, the regard for the freedom of speech goes against the exercise of this right. Also if Google can argue that based on the freedom of speech, they also shouldn’t delete your old school photo then they will not be subject to “the right to be forgotten”. It will be up to Google or other companies to make this evaluation, however, they will be heavily fined if it subsequently is assessed that they have made the wrong decision.

The right to blocking

The right to blocking enables you to block a company’s further processing of your personal data. This means that your personal data are held “hostage” until 1) you consent to further processing, or 2) the processing is necessary for completion of a legal claim to protect another individual’s rights or for the sake of important public interests.

In addition to this, the right serves as an alternative to the right of deletion – which means that you can choose to block the company or the authority’s possibilities of using your personal data instead of demanding deletion.

The right to data portability

As part of the principle that individuals should feel more control and secure when their personal data are processed, the right to data portability has been introduced. Under this right, you as an individual have the right to have your personal data released and transferred from one company to another. For instance, one could imagine a person who wants to use instead of This person would then be able to request to transfer all the personal data that they have stored to must not block or hinder the transfer of the data to despite that it is unattractive for them to transfer the data to a competitor.

Who to contact?

If you wish to exercise one of your above rights, you just have to contact the company or the authority which processes your personal data. For instance, you can via Google obtain a form which you will have to fill in and send to them if you wish to exercise your right “to be forgotten”. Alternatively, some companies will actually in future have a Data Protection Officer who will handle these enquiries. Please be aware that the Personal Data Regulation will not become effective until 2018.

Written by
Martin von Haller
Martin von Haller
Martin is recognised for his solid legal skills and as an innovative thought leader and strategist within the IT industry. He is a partner in Bird & Bird's International Tech and Comms Group and is based in Denmark. Martin is one of Denmark’s leading IT lawyers with almost 20 years’ experience of advising Danish and international organisations, including large blue chip companies on legal and commercial matters in connection with IT in a wide sense. He is considered a pioneer with respect to legal aspects of Online Technology Solutions (Ecommerce, internet and web services), Cyber and IT security, open source and open data and use of other open licence forms such as Creative Commons.
Related articles
PODCAST - Demystifying Intellectual Property and NFTs (Non Fungible Tokens)
1 min to read
11 June 2021
PODCAST – Demystifying Intellectual Property and NFTs (Non Fungible Tokens)
2021 has been the year Non Fungible Tokens (NFTs) have entered the public conscious, with the mainstream media highlighting a range of high profile NFTs being purchased for substantial sums. Rebecca...
Recent initiatives impacting the digital sector
Recent initiatives impacting the digital sector
Recent months have seen a veritable flurry of legislative, regulatory and soft law initiatives and proposals. The measures often tackle similar sectors – all things digital often being in the eye of the...
Innovation, cybersecurity and the energy infrastructure
1 min to read
04 May 2021
Innovation, cybersecurity and the energy infrastructure
As a vital system in modern society, energy infrastructure is a prime target for adversaries and represents a critical vulnerability deserving of special attention. Energy infrastructure and supply chain...
Users as digital assets: highlights from a tax perspective
2 min to read
28 April 2021
Users as digital assets: highlights from a tax perspective
In recent years, the developing digital age has completely modified the approach of enterprises to how they operate business. Globalisation and the ability to reach consumers through digital platforms...
We use analytics cookies to help us understand if our website is working well and to learn what content is most useful to visitors. We also use some cookies which are essential to make our website work. You can accept or reject our analytic cookies (including the collection of associated data) and change your mind at any time. Find out more in our Cookie Notice.