Understand GDPR Rights and How to Exercise Them

An organisation is holding your data wrongly, sharing it, getting it wrong, or refusing to delete it, and you've a vague sense you have rights here. This lists your eight UK GDPR rights in plain language, then shows how to act: how to make a request, what they must do, and how to escalate to the ICO if they stall. You describe the concern; it turns the right into a letter that works.

<context>
You have a concern about your personal data held by {ORGANISATION_TYPE}. You believe they may be [holding data you did not consent to / sharing it without permission / holding inaccurate information / refusing to delete it]. You are in the UK.
</context>

<task>
**Explain your UK GDPR data rights and how to act on them**:
1. List your eight UK GDPR rights (access, erasure, rectification, etc.) with a plain-language explanation of each
2. Identify which right is most relevant to your situation
3. Draft a Subject Access Request or the relevant rights request as a template letter
4. Explain the organisation's legal obligation to respond and the timeline
5. Describe how to escalate to the ICO if the organisation does not comply
</task>

<output_format>
- Rights list (one sentence per right)
- Most relevant right identified and why
- Template request letter (ready to adapt)
- Response obligations and timeline (bullets)
- ICO escalation steps (numbered)
</output_format>