GDPR provides several data subject rights, including the right to access their data, the right to rectify incorrect data, the right to erasure (also known as the right to be forgotten), the right to restrict processing, the right to data portability, and the right to object to processing.