Data protection rights under GDPR Data protection rights under GDPR

UK data protection law gives people a wider range of rights in relation to their personal data. The rights are as follows:

  • The right to be informed (i.e. told how your data will be used, for example by means of a privacy notice)
  • The right of access to your personal data held by an organisation
  • The right to have inaccurate data corrected
  • The right to erasure (known as 'the right to be forgotten')
  • The right to restrict processing of your personal data
  • The right to data portability
  • The right to object
  • Rights in relation to automated decision making and profiling

Some of these rights won't apply in all circumstances, but they do give you a good deal of control over how your information is used by organisations such as UEA. See below to find out more.

More information More information

The Information Commissioner's website is the best source of information about your data protection rights as they apply in the UK. See:

Accessing your data Accessing your data

One of the most common ways in which people exercise their data protection rights is to request a copy of the information an organisation holds about them.

If you would like to make a request to UEA for the data we hold about you, see Requests for personal information

Questions? Questions?

The ways in which the University typically uses personal data are set out in our main privacy notices.

If you have any concerns about how the University uses your data, or would like us to help you exercise your rights, contact us at

Please note, due to the COVID-19 outbreak we do not currently have access to University post, therefore we request that you do not submit any queries via paper letter at this time.