Your Data Rights, in Plain Terms
Many places give you rights over the information a service holds about you. You do not need to be a lawyer to use them.
The rights that commonly exist
Under the GDPR and similar laws elsewhere, people often have a set of rights over their own personal data. The exact rights depend on where you and the service are, but the common ones are worth knowing.
- Access. Ask what data is held about you.
- Rectification. Ask for wrong data to be corrected.
- Erasure. Ask for data to be deleted, within limits.
- Portability. Ask for a copy you can take elsewhere.
- Objection. Ask that certain uses, such as marketing, stop.
How to use one
Find the privacy policy's contact point, write a short dated request that names the right you are using, and keep a copy. A service usually has a set period to respond.
Access requests come first for a reason
If you are unsure what a service holds, an access request is the natural starting point: it shows you the data before you decide whether to correct, delete or object to any of it. The reply also reveals how organised a service is about your information, which is useful to know in itself. Keep whatever it sends, because it is the baseline for anything you ask next.
When the answer is no
Rights have exceptions; a service may keep some data to meet a legal duty, for example. A refusal should come with a reason. If you disagree, most regions have a data-protection authority you can contact.
Make the request easy to act on
A request is handled faster when it is specific. Name the right you are using, say what you want in one or two lines, and include whatever the service needs to find your account. Keep it polite and dated, and send it to the contact point named in the privacy policy rather than a general address, so it reaches the people who deal with these requests.
If the clock runs out
Most laws give a service a set window to respond, sometimes with an extension for complex requests. If that window passes with no reply, a short follow-up that references your original dated request usually moves things along. Where it does not, the data-protection authority for your region can tell you what to do next, and contacting them is free.
This page explains common rights in general terms. It is not legal advice, and the rules where you live may differ.
Revised 2026-11-10