LOPDP, derechos del titular
LOPDP, arts. 12-19, 22-24 (derechos del titular)
In force since .
A data subject rights rule binding public and private bodies.
- Obligation class
- Data subject rights, Disclosure
- Audit expectation
- none
What it requires
- Answer a data subject's request for information, access, rectification, updating, erasure, objection, portability or suspension of the processing on the terms articles 12 to 19 set.
These lines are LexLint's reading of the law's text.
In the frameworks
- NIST Privacy Framework
- CT.PO-P3Policies, processes, and procedures for enabling individuals’ data processing preferences and requests are established and in place.
- FINOS AIGF
- AIR-PREV-006Data Quality & Classification/Sensitivity
- AIR-DET-021Agent Decision Audit and Explainability
Our reading of where this law's duties sit in each framework. It never says that running a control meets the law. How we read a framework against the law
What it makes you log
Logging duty
Articles 12 to 19 and 22 to 24 give the data subject rights to information, access, rectification, erasure, objection, portability and suspension, and to consult the national register (Article 22). They place answering duties on the controller and ask for no log, register or audit of the answers. The register that Article 22 opens to public consultation is the national register of Article 51, a section this row does not cite. The row cites no scope clause, so the territorial hook is empty.
- Kind
- None
- As of
What this law does
Article 12 gives the data subject a right to information, article 13 a right of access, article 14 a right of rectification and updating, article 15 a right of erasure, article 16 a right to object, article 17 a right to portability and article 19 a right to suspension of the processing, with article 18 setting the exceptions to rectification, updating and erasure.
Article 22 gives a right of consultation, article 23 a right to digital education, and article 24 fixes how the rights are exercised. The law was published in Registro Oficial Suplemento 459 of and is recorded there as in force, which is the day these provisions began to bind.
When LexLint raises it
When your app profile says your app serves under-18s or processes personal data.
Back to the example · Lint your app
Page updated .