You have the right to be told by the University whether it or someone else on its behalf is processing your personal data and if so, to be given a description of the personal data, the purposes for which they are being processed and the likely recipients and sources of that personal data. You are also entitled to receive a copy of this personal data. All requests for access must be made in writing to the Data Protection Officer. The University will respond promptly to requests within forty days. See making an information request.
You are entitled to request, in writing, that the University does not process personal data where such processing is likely to cause substantial damage or substantial distress to you or another person. There are a number of provisos to this right, in particular:
- the damage or distress must be "unwarranted" or
- the processing is not necessary for fulfilling a contract with you
- for fulfilling a legal obligation of the University
- or for protecting your vital interests.
You are entitled to request in writing that the University does not process personal data for the purposes of direct marketing.
You are entitled, by writing, to request that the University ensures that no decision that significantly affects you is based solely on the processing of personal data by automatic means. An example of automated decision-taking is where the decision to reject interviewees is made by computer on the basis solely of psychometric testing. Where a decision which significantly affects you is based solely on such automatic processing, the University must notify you that the decision was taken on that basis as soon as reasonably practicable. Note, though, that any human intervention or discretion will mean that the automated decision-taking provisions do not apply.
If you suffer damage or distress as a result of the University’s breach of any of the requirements of data protection legislation, you may be entitled to compensation.
You may request that the University to rectify, block, erase or destroy data relating to you if it is inaccurate. Please contact us if you believe information we hold is incorrect.
You may request that the Information Commissioner assesses whether or not it is likely that any processing of personal data has been or is being carried out by the University in non-compliance with the Act.