Under GDPR, data subjects have rights related to which aspects of personal data?

• A. Data can be stored for any duration
• B. Rights regarding collection, use, and storage of personal data
• C. Data must be publicly accessible
• D. Rights limited to marketing consent

Answer: (B)

Under GDPR, individuals have rights over how their personal data is collected, used and stored by organizations. This means people can access their data, request corrections, have it erased, restrict processing, object to processing, and demand data portability, among other protections. These rights cover the full lifecycle and handling of personal data, not just one narrow aspect. So the best answer is the one that mentions rights regarding collection, use, and storage of personal data, reflecting the broad scope of GDPR. Statements suggesting data can be stored for any duration conflict with storage minimization and retention rules; claiming data must be publicly accessible clashes with privacy protections; and saying rights are limited to marketing consent ignores the wide range of data processing GDPR regulates.