GDPR gives individuals various rights in relation to their data, and it is important that you understand how these rights apply to personal data you may be processing, and how we deal with requests made under these rights at the University.
Please see below for more information and guidance documents.
You have the right to be informed about the collection and use of your personal data. This is normally communicated via a privacy notice.
Please see ICO guidance: Right to be informed for further details.
You have the right to request confirmation that your data is being processed and access to your personal data
Our statutory deadline for response is 1 calendar month. SARs should be made directly to the Legal Office at legaloffice@beds.ac.uk. If you receive one, forward it to the Legal Office as soon as possible.
For more information, please read our SAR Guidance [PDF] and for a short video on quick and simple redactions in Adobe, see our SAR Guide to Easy Redactions
You have the right to request rectification of inaccurate personal data. In certain circumstances we can refuse a request for rectification.
Please see ICO guidance: Right to rectification for further details.
GDPR gives people the right to ask us to erase the data we hold about them. This is known as the Right to Erasure or "Right to be Forgotten". However, it is not an absolute right, and does not apply in every situation.
Please see ICO guidance: Right to erasure for further details
Individuals who wish to make a request for their data to be erased should email: DPO@beds.ac.uk along with proof of ID.
You have the right to 'block' or suppress processing of your personal data if you believe it is in inaccurate, the processing is unlawful and in other limited circumstances.
Please see ICO guidance: Right to restrict processing for further details.
You have the right to receive personal data you have provided to the University in a structured, commonly used and machine readable format. It also gives you the right to request the University transmits this data directly to another controller.
Please see ICO guidance: Right to data portability for further details.
You have the right to object to:
Please see ICO guidance: Raising concerns for further info.
To exercise any of the above rights please contact DPO@beds.ac.uk