From 25 May 2018, UK data protection law gives people a wider range of rights in relation to their personal data. The rights are as follows:
- The right to be informed (i.e. told how your data will be used, for example by means of a privacy notice)
- The right of access to your personal data held by an organisation
- The right to have inaccurate data corrected
- The right to erasure (known as 'the right to be forgotten')
- The right to restrict processing of your personal data
- The right to data portability
- The right to object
- Rights in relation to automated decision making and profiling
Some of these rights won't apply in all circumstances, but they do give you a good deal of control over how your information is used by organisations such as UEA. See below to find out more.
The Information Commissioner's website is the best source of information about your data protection rights as they apply in the UK. See:
- Your rights under the Data Protection Act 1998
- Your rights under the GDPR (which takes effect from 25 May 2018)
- How to exercise your rights with organisations that process your personal data
One of the most common ways in which people exercise their data protection rights is to request a copy of the information an organisation holds about them.
If you would like to make a request to UEA for the data we hold about you, see our webpage 'requests for personal information'.
The ways in which the University typically uses personal data are set out in our main privacy notices.
If you have any concerns about how the University uses your data, or would like us to help you exercise your rights as listed above, contact the University's Information Compliance team.
You can reach us by email at email@example.com, by phone on +44 (0)1603 59 2431, or by mail at the following address: The Library, University of East Anglia, Norwich Research Park, Norwich, NR4 7TJ.