GDPR provides people with the authority to manage personal data collected in an organization. Use these permissions through a data subject request (DSR). The organization must provide real-time information about DSR and data leakage, as well as the implementation of a data protection impact assessment (DPIA).