The GDPR gives individuals eight key rights. These include the right to see their data, know how it's used, and move their data. They also have the right to forget their data. Companies must respect these rights or face big fines.