GDPR grants several rights to data subjects, which toxicologists must respect. These include the right to access data, the right to rectification, the right to erasure (or the right to be forgotten), and the right to restrict processing. Toxicologists must have procedures in place to respond to these rights promptly and effectively.