The Data Subject has the right to: (a) withdraw consent to Processing, without affecting Processing carried out before withdrawal; (b) request amendment, updating or blocking of Personal Data; (c) obtain a copy of processed Personal Data; (d) transfer Personal Data to another Controller; (e) request erasure of Personal Data unless Processing is necessary for national archiving and documentation; (f) be notified of any breach or infringement involving Personal Data and the measures taken in response. The Regulation prescribes the controls and procedures for exercising these rights.
This article belongs to the source version of Royal Decree 6/2022. Amendment 68/2026 has not yet been incorporated into the published article-by-article text. Interpretation and application must be checked against the official Arabic text and the current version.