On the whole, the rights individuals enjoy under the GDPR are the same as under the previous Data Protection Acts, but with some significant enhancements:

• The rules for dealing with subject access requests have changed under the GDPR. The timescale for processing such requests is now a maximum of one calendar month. 
• We will also need to provide some additional information to people making requests, such as our data retention periods and the right to have inaccurate data corrected.

UCC's Data Subject Rights Procedure can be found here:

 Data Subject Rights Procedure