The chapter critically illustrates the multiple tools, both substantive and remedial in nature, that the European General Data Protection Regulation, in the form of ‘rights of the data subject’, recognises to the user of a digital platform in order to prevent violations of the right to personal data protection or react to them, in increasingly proactive terms.