Data Subject Rights
Also called: Right to Access · Right to Erasure · Individual Privacy Rights
Data subject rights are the specific entitlements an individual has over their own personal data — commonly the right to access what's held about them, correct inaccuracies, request deletion, and object to certain processing. A contract's data-handling terms need to specify how these requests are actually fulfilled in practice, not just acknowledge they exist.
In more detail
Most modern data-protection frameworks grant individuals these rights by law regardless of what any contract says — the contractual question isn't whether the rights exist, but which party (the customer or the vendor processing data on their behalf) is responsible for actually fulfilling a request when one comes in.
For a vendor processing data on a customer's behalf, this clause typically requires forwarding data subject requests to the customer promptly, or fulfilling them directly within an agreed timeline — silence on this can leave both parties unclear who's actually responsible when a real request arrives.
Response timelines matter because most frameworks impose statutory deadlines for responding to data subject requests — a vendor who can't confirm they'll support the customer's ability to meet that deadline is a real operational risk, not just a paperwork gap.
An individual submits a request to a company asking what personal data it holds about them and to delete it. Because the company uses a third-party vendor to process some of that data, the contract's data subject rights clause determines whether the vendor must fulfil the request directly or support the company in doing so within the required timeframe.
The specific rights granted to individuals — and the statutory deadlines for responding — vary by data-protection regime. A contract's commitments should be built around whichever regime actually applies to the data in question.
What our lawyers check
- Which party is responsible for fulfilling data subject requests
- Response timelines committed to, relative to statutory deadlines
- The process for forwarding or escalating requests between customer and vendor
- Whether the clause covers the full range of rights under the applicable regime
Contracts where this clause matters
Related terms
This definition is general information about commercial contracting practice, not legal advice. How a clause operates depends on the specific wording of your agreement and the law that governs it. For advice on your contract, have it reviewed by a lawyer.
All glossary terms