Corporate report

NDA procedure for handling GDPR data subject rights requests

Our procedure for adhering to the General Data Protection Regulations that provides rights for individuals.

Documents

IMPR08 - Procedure for handling GDPR Data Subject Rights

Request an accessible format.
If you use assistive technology (such as a screen reader) and need a version of this document in a more accessible format, please email enquiries@nda.gov.uk. Please tell us what format you need. It will help us if you say what assistive technology you use.

Details

The General Data Protection Regulations provides the following rights for individuals:

  1. be informed
  2. access
  3. rectification
  4. erase
  5. restrict processing
  6. data portability
  7. object
  8. rights in relation to automated decision making and profiling

This procedure covers rights 3 to 7.

Right 1 to be informed is covered by our published privacy notice and consultation document template. The access right is covered by our Subject Access Request process.

Published 3 May 2018