Data privacy laws give people rights to access, change and control the data businesses collect about them. People make their wishes known to businesses in the form of a Subject Rights Request (SRR). The laws also require that businesses provide methods for people to register these requests and to respond accordingly.