A Practice Note providing an overview of data subject rights under the EU General Data Protection Regulation (GDPR). This Note explains the various rights of data subjects under the GDPR, the controller's obligations regarding those rights, and different steps the controller can take to facilitate the exercise of data subject rights.