We use cookies to ensure that we give you the best experience on our website. You can change your cookie settings at any time. Otherwise, we'll assume you're OK to continue.

Durham University

Internal Communications
  • Need to know

    Need to know
  • Latest news

    Latest news
  • Events and Activities

    Events and Activities
  • Lectures and Seminars

    Lectures and Seminars

GDPR - How will you uphold Individual Rights?

(11 May 2018)

This week the Information Governance Unit will focus on upholding Individual Rights. Under the GDPR, data subjects are provided certain rights with regards to how their personal data is processed. These rights need to be designed in to personal data processing activities. For more information about data protection and information governance, please visit the Information Governance webpages and for more information about each of the Individual Rights, refer specifically to this page.

In summary, these rights are:

The right to be informed

Individuals have the right to be made aware of how their personal data is being used.

The right of access

Individuals have the right to access their personal data so that they are aware of and can verify the lawfulness of the data processing, as well as correcting any inaccuracies in that data.

The right to rectification

Individuals have the right to have personal data rectified where it is inaccurate or incomplete.

The right to erasure

Individuals have the right to request the deletion or removal of personal data where there is no compelling reason for its continued processing. This is often called the 'right to be forgotten'.

The right to restrict processing

Individuals have the right to ask us to temporarily stop processing their personal data in certain circumstances whilst such processing is reviewed.

The right to data portability

Individuals have the right to obtain and reuse their personal data for their own purposes across different services. It allows them to move, copy or transfer personal data easily from one IT environment to another in a safe and secure way, without hindrance to usability.

The right to object

Individuals have the right to object to processing their personal data for particular purposes, such as direct marketing (including profiling).

Rights in relation to automated decision making and profiling

Individuals have the right not to be subject to a decision made solely by automated means and to profiling (automated processing of personal data to evaluate certain things about an individual).

Not all of these rights are absolute – that is, they do not apply in every instance and some are conditional on, for example, the lawful basis for processing the data.

Have something to include?

Please liaise with the designated contact for your department or college. For further guidance, email

Get in touch