Children have several rights under GDPR, including the right to access their data, the right to rectify any inaccuracies, and the right to have their data deleted. Pediatric practices must ensure these rights are upheld and provide mechanisms for guardians to exercise these rights on behalf of their children.