Rights of data subjects include which right?

Rights of data subjects include which right?

• A. The right to know about how data is collected and used
• B. The right to refuse data sharing entirely
• C. The right to know about the collection, use and storage of their data
• D. The right to transfer their data to other people

Answer: (C)

Being informed about how personal data is handled is essential. Data subjects have a right to clear information about what data is collected, why it’s processed, and how long it’s stored. This transparency lets individuals understand the full lifecycle of their data and assess the privacy risks and controls they might want to exercise. The option that mentions collection, use, and storage captures this complete picture—the storage aspect is important because it relates to retention and eventual deletion, not just how data is initially collected or used. The other ideas are less accurate in capturing the full right: simply knowing about collection and use omits how long data is kept; a blanket right to refuse data sharing isn’t a universal guarantee and depends on context; and data portability is about obtaining a copy of one’s data and moving it to another controller, not about sharing decisions in general.

Being informed about how personal data is handled is essential. Data subjects have a right to clear information about what data is collected, why it’s processed, and how long it’s stored. This transparency lets individuals understand the full lifecycle of their data and assess the privacy risks and controls they might want to exercise. The option that mentions collection, use, and storage captures this complete picture—the storage aspect is important because it relates to retention and eventual deletion, not just how data is initially collected or used.

The other ideas are less accurate in capturing the full right: simply knowing about collection and use omits how long data is kept; a blanket right to refuse data sharing isn’t a universal guarantee and depends on context; and data portability is about obtaining a copy of one’s data and moving it to another controller, not about sharing decisions in general.