Your data rights

Under the General Data Protection Regulation (GDPR) you have the following rights:

Faq Items

Right to be informed

Right of access

Right to rectification

Right to erasure

Right to restrict processing

Right to data portability

Right to object

Right to object to automated decision-making

Rights Requests

The Data Protection Officer (DPO) is responsible for processing all Rights Requests.

If you wish to exercise any of your rights, please contact the DPO by email.

You should describe the information you want as clearly as possible.  If your request is too broad or unclear, we will ask you to be more specific.

Please be aware that we cannot process your request until we have received proof of your identity. 

All requests will be logged and acknowledged on behalf of the University by the DPO.


We will deal with your Rights Request ‘without undue delay’ and, in any event, within one month.  In all cases the timescale starts from the point that we have verified your identity. 

The timescale is extendable by two further months, if necessary, due to complexity/scale of the request.

A decision to extend the timescale will be made by the DPO who will inform you of any such extension within one month of receipt, together with reasons for the delay.


A Rights Request can be exercised free of charge.

However, where a Rights Request is deemed to be ‘manifestly unfounded’ or ‘excessive’ (which includes repeat requests), the University may either refuse to act on the request or charge a reasonable fee.

A decision that a Rights Request is manifestly unfounded or excessive will be made by the DPO.

The University is also allowed to charge a reasonable fee for providing copies of the data which has already been provided.

A ‘reasonable fee’ will be calculated based on the actual administrative costs of providing the information.