Under data protection legislation individuals have certain rights relating to the way the University processes their personal data.  Further details can be found within the Individual Rights Guide and for information on .  A brief overview is below:

• Right to information
  In line with the principle of fair and lawful processing, individuals have the right to be informed about the collection and use of their personal data.  Privacy notices are provided at the point where personal data is collected and a number of unique notices can be found within our Privacy Notices section.
  
  
• Right to access
  Individuals have the right to access their personal data held by the University.  Further information on making a Subject Access Rights can be found in the Subject Access Request Guide.
  
  
• Right to rectification
  Individuals have the right to ask the University to rectify any inaccuracies contained within personal data held about them.  Further information can be found in our Individual Rights Guide.
  
  
• Right to erasure
  

  Also known as the right to be forgotten, an individual has the right to have personal data removed or deleted within one month if there is no compelling reason for it being processed.  Further information can be found in our Individual Rights Guide.
  

• Right to restrict processing
  In certain circumstances, individuals can request that the University limits or suppresses the way in which it uses their personal information.  Further information can be found in our Individual Rights Guide.
  

• Right to data portability
  Individuals have the right to request their data in a particular format that will enable them to transmit this information from one data controller to another.  Further information can be found in our Individual Rights Guide.
  

• Right to object
  Individuals have the right to object to the processing of their personal data in a number of situations.  Further information can be found in our Individual Rights Guide.