| Right or duty | What it covers | Planning use |
|---|---|---|
| Personal privacy | Keeping personal privacy in digital communities | Check what each service collects before you rely on it for sensitive messages or files. |
| Free expression and reporting | Expressing ideas freely and reporting inappropriate content | Use a platform’s reporting tool when content crosses a line, and keep your own posts within the law. |
| Right to know (CCPA) | Learning what personal information a business collects and how it is used and shared | Ask what a business holds before you decide whether to delete or restrict anything. |
| Right to delete (CCPA) | Deleting personal information collected from you, with some exceptions | Expect that a business may keep some records; request deletion for accounts you no longer use. |
| Opt out of sale (CCPA) | Opting out of the sale of your personal information | Use this to stop data being sold on, rather than waiting for a full deletion. |
| Correction (GDPR) | Correcting incorrect information held about you | Ask for a fix when a record affects a decision about you. |
| Consent (GDPR) | Processing personal data is generally prohibited unless the law allows it or the person consents | Treat consent prompts as real choices, not formalities to click through. |
| Conduct duties | Appropriate language, respect for others’ opinions, obeying copyright, not sharing others’ work without permission | Seek permission and give credit before reusing anyone else’s material. |
The rights listed come from Rumie’s digital rights and responsibilities lesson, and the GDPR and CCPA entries from Pace University’s Social Media Law blog.
Digital rights and responsibilities are the human rights you hold online, such as privacy and free expression, paired with duties such as respecting copyright and others’ opinions. Statutes like GDPR and CCPA turn some of those rights into enforceable claims.
For the wider legal landscape, see our overview of data privacy laws explained. This page focuses on what you can claim, what you owe others, and what to do next.
What rights and duties change in practice
Your digital rights are the human rights you already have, applied to the digital world, according to a school library guide on digital citizenship. That framing matters because it means online life is not a rights-free zone. It also means that a right can be limited by law or by the rights of other people.
A simple vocabulary helps. A right is something you are allowed to do, and a responsibility is something you have to (or should) do, as Rumie’s lesson puts it. School guidance from Silvestri Junior High adds that users have a right to privacy and freedom of personal expression, exercised by using technology in an acceptable and appropriate manner. The practical consequence is that every right you want to rely on comes with a condition you are expected to meet.
Which route you take depends on where your claim comes from:
- A statute covers your situation. Use the formal route, such as a request to a business to show, correct, delete or stop selling your data. This is the strongest option because the business has a legal duty to respond.
- No statute clearly applies. Fall back on platform controls, reporting tools and the platform’s etiquette guidelines. These are weaker, but they are usually faster.
- The issue is about another person’s behaviour. Report it rather than answering in kind. Reporting cyberbullying, threats and inappropriate use of digital resources is itself listed as a responsibility.
The next section turns the headline rights into named laws so you can tell which route fits.
Core rights and the laws behind them
Privacy, expression and access to digital tools are the broad rights. Specific legal claims over personal data come from data protection and consumer privacy laws. The Data Protection Vs Data Privacy: How They Differ, Why Both Matter, And What To Do About It (2026 Guide) – Technopolicy article explains why the two ideas overlap but are not identical, which helps when you decide whom to contact.
GDPR
The GDPR gives people a right to correct incorrect information about them, and it starts from a restrictive default: processing personal data is generally prohibited unless the law expressly allows it or the person consents, with explicit consent required, as Pace University’s blog summarises. If a company asks for permission to use your data, you are being asked to give up that default protection, so read what the request covers.
CCPA
The CCPA gives consumers three headline tools: the right to know what personal information a business collects and how it is used and shared, the right to delete information collected from them with some exceptions, and the right to opt out of its sale. Use them in that order when you are unsure. Knowing first tells you whether deletion or opt-out is worth the effort.
Government-held data
The US Privacy Act of 1974 covers a different relationship. It gives people the right to access data held by government agencies and to correct errors in it, according to the same Pace University post. It is the route to try when the record in question belongs to an agency rather than a company.
Rights over data become more pressing when automated systems collect it at scale, a theme covered in AI Surveillance Technology: What It Is, How It Works, and Why It Matters in 2026 – Technopolicy.
Responsibilities that come with the rights
Your responsibilities online are mostly about respecting other people and their work. Rumie’s lesson lists them: use appropriate language, respect others’ opinions, obey intellectual property and copyright laws, and do not share others’ works without permission. These are the conditions that keep your own claim to expression and privacy credible.
Think before you post
Check what you post before you post it, and check the platform’s etiquette guidelines first. That habit protects you as well as others, because a public post is hard to withdraw. When you meet cyberbullying or threats, report them instead of engaging.
Copyright and fair use
The athenstech guide gives a short rule: if it isn’t yours, seek permission to use it, and if you use it, give credit. Fair use is a limited basis for using a portion of a work or an image without asking, and it is assessed case by case. Do not treat it as a blanket exemption. When you are unsure whether a use qualifies, ask for permission or choose different material.
Protecting your rights step by step
Protecting your rights means using the controls and legal claims that exist, while staying within your own responsibilities. Rumie describes the Protect principle of digital citizenship as covering rights and responsibilities, security, and health and wellness in order to keep users safe. A sensible order follows from that.
- Start with what is collected. Review the privacy settings and permissions on the services you use most, and remove access that a service does not need to work.
- Use legal requests for gaps. Where a law such as the CCPA applies, ask to know, delete or opt out. Where GDPR applies, ask for correction when information is wrong.
- Read consent requests carefully. Under GDPR, processing generally needs a legal basis or explicit consent, so agreeing is a decision with consequences.
- Keep your own conduct clean. Credit sources, avoid sharing others’ work without permission, and keep your tone appropriate so a complaint you make later stands on firm ground.
- Report rather than retaliate. Use reporting tools for abuse, threats or inappropriate content, and keep a record of what you reported.
Choose the legal route when a business holds your data, the platform route when the problem is content or conduct, and a government request when the record sits with an agency. Laws change, so check which rules currently apply to you before relying on a specific claim.
Frequently asked questions
When did the GDPR take effect?
The GDPR went into effect in May 2018, after approval in 2016, according to Pace University’s blog.
Is there a US federal consumer privacy law?
As of that 2021 account, the US had no federal-level consumer data privacy or security law. Only three states, California, Colorado and Virginia, had enacted comprehensive consumer privacy laws as of July 22, 2021, per the same post, so check current state law.
How long does copyright last?
Rights continue for 70 years after the creator’s death, then the work enters the public domain, according to the athenstech library guide.
What does the Protect principle of digital citizenship cover?
It covers rights and responsibilities, security, and health and wellness, all aimed at keeping users safe, per Rumie.
