Data subject rights

Under data protection legislation, individuals have a number of rights in respect of their personal data.

Data protection legislation provides a number of rights to data subjects with each right being applicable in certain circumstances or conditions. The rights are: 


For staff receiving a subject access request

For staff receiving a data portability request

Individuals can request that their personal data is erased or destroyed. Also known as the “right to be forgotten”.

Individuals have the right to object at any time to the use or storage of their personal data.

If personal data is inaccurate, out of date, or incomplete, individuals have the right to correction, update or completion of that data.

Individuals can request that the use or storage of their data is restricted in a manner of the individuals’ choosing.

Individuals have the right not to be subject to automated processing, including profiling.