​​Rights of a data subject

Your data is your data. It belongs to you so it’s important your data is used only in ways you would reasonably expect, and that it stays safe. Data protection law makes sure everyone’s data is used properly and legally.

Under the DPA 2018 and the UK General Data Protection Regulation (UK GDPR) you have the following rights, also known as Data Subject’s Rights:

• To be informed if your personal data is being used – an organisation must inform you if it is using your personal data;
• To get copies of your data – you have the right to find out if an organisation is using or storing your personal data;
• To get your data corrected – you can challenge the accuracy of personal data held about you by an organisation;
• To get your data deleted – you can ask an organisation to delete personal data that it holds about you;
• To limit how organisations use your data – you can limit the way an organisation uses your data;
• To data portability – you have the right to get your personal data from an organisation in a way that is accessible;
• To object to the use of your data – you have the right to object to the processing or use of your personal data in some circumstances;
• Relating to decisions being made about you without human involvement – where decisions are made about you when your personal data is processed automatically and in profiling;
• To raise a concern – if you are concerned about how an organisation is using your data.