Data Protection

Data subject rights

Under data protection legislation, individuals have a number of rights in respect of their personal data.

Data protection legislation provides a number of rights to data subjects with each right being applicable in certain circumstances or conditions. The rights are: 


Subject access requests

For staff receiving a subject access request

Right to data portability

For staff receiving a data portability request

Right to be forgotten (right to erasure)

Individuals can request that their personal data is erased or destroyed. Also known as the “right to be forgotten”.

Right to object

Individuals have the right to object at any time to the use or storage of their personal data.

Right to rectification

If personal data is inaccurate, out of date, or incomplete, individuals have the right to correction, update or completion of that data.

Right to restrict processing

Individuals can request that the use or storage of their data is restricted in a manner of the individuals’ choosing.

Right to object to automated processing

Individuals have the right not to be subject to automated processing, including profiling.