Technical Framework to Ensure Data Subject's Rights in GDPR: A Conceptual Design

In 2018, the European Union's General Data Protection Regulation (GDPR) was enacted to regulate and harmonise data collection and processing practices, protect individuals’ rights, and enforce legal accountability and penalties on non-compliant organisations. The GDPR is widely regarded as the world's most stringent privacy and security law, with implications for future amendments and privacy laws in countries such as Australia. Although organisations have implemented various approaches and processes to meet GDPR requirements, they continue to face challenges in aligning their systems and processes to ensure full GDPR compliance.