Your right of access to personal information
Under Data Protection Legislation individuals have a right of access to their own personal data held by the University. A request for all such information is called a Subject Access Request.
An individual is entitled to:
- A description of the data
- Know the recipients of the data
- Information about any automated decisions that have been made
- A copy of the data on request
- All the above within one month
For further information about your individual rights please see the Information Commissioner's Office.
If a representative is acting on your behalf, please fill out the below form to give them permission to do so.
Making a subject access request
To make a request for information that relates about you, a subject access request, please use the below form:
This form is designed to assist the process of making a subject access request and may help to speed the process up. However, it is not mandatory and all subject access requests made in other written formats will be processed.
You must state specifically what information is required. You must also provide proof of identity, in the case of a student or staff member they must produce their ID card. The University must provide the information you have requested within the specified time limit of one month to a stated address (unless an exemption or time extension applies).
To make a request please send your request and IDto the University Information Compliance
Contact details
Information Compliance Team
University of Westminster
Third floor
32–38 Wells Street
London W1T 3UW
Subject access request procedures
The process of how the University of Westminster handles Subject Access Requests can be found in the Subject Access Requests Procedure:
An overview of the process can be seen in the Subject Access Request process flowchart:
Other data subject rights
Under the General Data Protection Regulation, individuals in particular circumstances may have specific rights regarding the processing of their personal data.
These are:
- Rights to information about how your personal data is processed
- Rights to access your personal data – subject access requests
- Rights to rectification
- Right of erasure (to be forgotten)
- Rights to restriction of processing
- Rights to data portability
- Rights to object to processing right to complain
If you have any questions or enquiries relating to these rights please let us know at [email protected].
How can you request correction of inaccurate information?
Whilst we try to ensure that any personal data we hold about you is correct, there may be situations where the information we hold is no longer accurate. If this is the case, please contact the department holding the information so that any errors can be investigated and corrected. If you don’t know which department to contact please contact the Information Compliance Team.
You can ask to delete information (right to be forgotten)
In some circumstances you can ask for your personal information to be deleted, for example, in instances where:
- your personal information is no longer needed for the reason why it was collected in the first place
- you have removed your consent for us to use your information (where there is no other legal reason for us to use it)
- deleting the information is a legal requirement
Please note that there are situations where the right to be forgotten does not apply. Please contact the Information Compliance Team to make a request.
You can ask to limit what we use your data for
In some circumstances, you have the right to restrict what processing an organisation carries out or ask that they stop processing your personal data. When processing is restricted, the organisation may continue to store your data but not process it further. Please contact the Information Compliance Team to make a request.
You can ask to have your information moved to another provider (data portability)
You have the right to ask for your personal information to be given back to you or another service provider of your choice in a commonly used format. Please contact the Information Compliance Team to make a request.
You can object
You have the right to object to processing of your personal data at any time. This means that you can stop or prevent an organisation from using your data. However, it only applies in certain circumstances. Please contact the Information Compliance Team to make a request.
Automated decision making and profiling
You have a right to request that decisions based solely on automated processing, including profiling, which may produce a legal effect or affect them significantly, to have some form of human input so they are not automatically generated by a computer. Please contact the Information Compliance Team to make a request.
Right to complain
You have the right to complain about how we use your personal data. In the first instance, please contact the Information Compliance Team.
How to contact us?
If you would like further information or if you have any concerns about how we handle your data, these can be raised with our Information Compliance Team by emailing [email protected] or writing to;
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Tel: 0303 123 1113 (local rate) or 01625 545 745 if you prefer to use a national rate number. Alternatively, visit www.ico.org.uk or email [email protected].