The GDPR provides the individual with eight rights to protect his or her privacy. Information about the rights must be provided by the controller before collection of the data and when the individual otherwise so requests. Sometimes the individual's right to withdraw his or her consent to certain use under article 7 GDPR is presented as a specific data subject right. The 8 data subject rights are: 1. The right to be informed  2. The right of access  3. The right to rectification 4. The right to erasure 5. The right to restrict processing 6. The right to data portability 7. The right to object 8. Rights in relation to automated decision making and profiling.