Under GDPR, which rights are specifically mentioned for EU subscribers?

• A. Right of access and erasure, and clear privacy notices.
• B. Right to opt out only.
• C. No rights.
• D. Right to data sale without notice.

Answer: (A)

At the heart of GDPR for EU subscribers is giving individuals control over their personal data, especially through access, erasure, and clear communication about processing. The right of access lets someone ask whether their data is being processed and obtain a copy of the data along with details about how and why it’s used, who it’s shared with, and how long it will be kept. The right to erasure (the so-called right to be forgotten) allows deletion of personal data when it’s no longer needed, when consent is withdrawn and there’s no other legal basis to keep it, or in similar qualifying situations. To empower these rights, GDPR requires clear, easily understandable privacy notices that tell individuals what data is collected, for what purposes, which partners or processors have it, how long it’s retained, and what rights they have—so people aren’t left guessing how their information is used.

Other options don’t fit because GDPR does not limit rights to opting out only, it does grant several protections beyond that. It also does not give a blanket right to sell data without notice; any sale or sharing of data must have a lawful basis and be communicated transparently.