Patients have several rights under GDPR, including:
Right to be informed: Patients must be informed about the collection and use of their personal data. Right of access: Patients have the right to access their personal data and obtain information about how it is being processed. Right to rectification: Patients can request the correction of inaccurate or incomplete data. Right to erasure (right to be forgotten): Patients can request the deletion of their personal data under certain conditions. Right to restrict processing: Patients can request the restriction of data processing under certain circumstances. Right to data portability: Patients can obtain and reuse their personal data across different services. Right to object: Patients can object to the processing of their data in certain situations. Rights related to automated decision-making: Patients have rights related to automated decision-making and profiling.