Individuals have several rights under GDPR, including the right to access their data, the right to rectify inaccuracies, the right to erasure (right to be forgotten), the right to restrict or object to processing, the right to data portability, and the right not to be subject to automated decision-making.