Which rights are commonly emphasized by data protection regulations such as GDPR and CCPA?

• A. The right to restrict processing of data by default.
• B. The right to access personal data and the right to delete or request deletion.
• C. The right to process data without notice.
• D. The right to publish data without consent.

Answer: (B)

Data protection regimes center on giving individuals control over their information. The most consistently emphasized rights are the ability to access personal data held by an organization and to request deletion of that data. Access rights let people see what data exists, how it’s being used, and obtain a copy of it, while deletion rights provide a remedy to remove data when it’s no longer needed or when consent is withdrawn. These rights together empower individuals to verify accuracy, monitor how their data is used, and curb unwanted processing by removing it from active records. The other options describe practices that don’t reflect the main ways these laws empower individuals: processing without notice undermines transparency and consent; publishing data without consent is not permitted; and restricting processing by default is not the standard way these regimes frame their principal rights.