Individual rights
Which rights can a person exercise, and within what time must the answer be given?
EU
Dataskyddsförordningen
art. 15 till 22
Access, rectification, erasure, restriction, portability and objection, with an answer without undue delay.
- Deadline
- One month, extendable by two months where complex
- Penalty
- Up to EUR 20 million or four percent of global turnover
- Supervision
- Integritetsskyddsmyndigheten
- Read
- 2026-08-22
United States
California Consumer Privacy Act, som ändrad genom CPRA
Cal. Civ. Code §§ 1798.100, 1798.105, 1798.106 och 1798.120
Rights to know, delete, correct and opt out of sale and sharing, and to limit the use of sensitive data.
- Deadline
- 45 days, extendable by a further 45 days
- Penalty
- Civil penalty per violation
- Supervision
- California Privacy Protection Agency
- Read
- 2026-08-22
China
Personal Information Protection Law
art. 44 till 50
Rights to know, to decide, to restrict, to obtain a copy, to correct, to delete and to be given an explanation of the processing rules.
- Deadline
- Without delay, no fixed deadline in the statute
- Penalty
- Up to CNY 50 million or five percent of the previous year's turnover
- Supervision
- Cyberspace Administration of China
- Read
- 2026-08-22
Connections
Sources and review
Register version crossover-v1.0.0 · Read 2026-08-22
This page restates written law with the provision and the official source. It is not legal advice in an individual matter.
Next step
Three ways to put the register to work in your own practice.
Start with your task
Litigation
Find support in a judgment
Search guiding decisions, see what became final and follow changes in the law.
In-house, deals
Map the rules in a transaction
Move from theme to act and on to the article that carries the duty.
Compliance
Assess the risk in a process
Risk scoring per legal area, with the sources behind every score.