Rights relating to your Personal Data

The Data Protection Act 2018 (DPA) and the General Data Protection Regulation (GDPR) provide you with eight rights relating to your personal data held/processed by the University:

  1. Right to Access (Subject Access Request)
  2. Right to be Informed (Privacy Notices)
  3. Right to Object to Processing
  4. Right to Rectification
  5. Right to Erasure (Right to be Forgotten)
  6. Right to Restrict Processing
  7. Right to Data Portability
  8. Rights related to Automated Decision Making including profiling

Subject Access Request

You can request access to the data we hold about you via our:

Your written request should include:

  • your full name, address and description of the information that you seek
  • two proofs of identification:
    • one photographic ID (a photocopy of your staff/student smartcard, passport or driving licence)
    • proof of address (a photocopy of a recent bill or statement showing your current address

Subject Access Requests should be addressed to:

Information Security Officer (Compliance)
IT Service
Claremont Tower
Newcastle University 
Newcastle upon Tyne 

NE1 7RU

Email: rec-man@newcastle.ac.uk

Requests for access to occupational health records should be addressed to Occupational Health.

We are obliged to reply promptly to your request and in any event within one month of it being received (exceptionally this period may be extended by two months).

If we need additional information in order to identify and locate the information you wish to access then, provided we tell you what is required, we do not have to respond to your request until this additional information has been received.