Data Subject Rights

A number of the rights currently applicable to individuals under the DPA have been strengthened under the GDPR, and some new rights have also been introduced. The rights are as follows:

The right to be informed emphasises the need for transparency over how the Students’ Union uses personal and special category data which it collects. The Union is required to inform data subjects of why it collects information, how it will use it, who it will be shared with, how it will be safeguarded and when it will be assessed for deletion. The Union is also required to inform individuals of their rights in relation to data which is processed about them.

Individuals have a right to access their personal data and supplementary information. This right allows data subjects to be aware of and verify the lawfulness of the processing. Data subjects are entitled to:

  • confirmation that their data is being processed;
  • access to their personal data;
  • other supplementary information, such as who the data is shared with.

The right to rectification gives individuals the right to have personal data, held about them, to be rectified where it is inaccurate or incomplete.

The right to erasure is also known as the ‘right to be forgotten’. The main principle of this right is to enable an individual to request the deletion or removal of personal data where there is no compelling reason for the University to continue to keep processing that information.

In certain circumstances individuals can exercise their right to ‘block’ or supress processing of their personal data. Where processing is restricted, the Students’ Union will be allowed to retain the personal data but not use it in any way.

The right to data portability allows individuals to obtain and reuse their personal data for their own purposes across different services. It allows individuals to move, copy or transfer personal data from one IT environment to another in a safe a secure way, without hindrance to usability.

Individuals have the right to not be subject to a decision based solely on automated processing, including profiling, where this produces legal effects on them or affects them in a similar way.

For more information on how we process your personal information please see our privacy notices.

If you wish to invoke any of your data subject rights please contact the Data Protection Officer of the Students’ Union:


Misbah Ashraf | Data Protection Officer

Lancaster University Students’ Union

Bowland Main,

Lancaster University,



LA1 4YT.


Tel: +44(0) 1524 510418 | 07400 737838