Which statement about data subject rights is true?

• A. Restrict processing only.
• B. Rectify data only.
• C. Object to processing only.
• D. Restrict, rectify, and object to processing.

Answer: (D)

Data subjects have several distinct rights over their personal data, and these rights are not limited to a single action. They can restrict processing when the basis for processing is in doubt or when the individual wants to pause activity (for example, while accuracy is checked), they can request rectification to correct inaccurate data, and they can object to processing in appropriate situations (such as direct marketing or when the processing relies on legitimate interests). Because these rights can be exercised separately or together, the statement that combines restricting, rectifying, and objecting to processing accurately reflects what data subjects can pursue. The other options implying only one right is available miss this broader range of rights.