...
Right of access and portability – After data processing, a data subject is able to request a copy of any personal data that has been processed.
Right to object – If a data subject does not want their data to be processed, they have the right to object to data processing and prevent their data from being processed further.
Right to restrict processing – Similar to the right to object, if a data subject is not comfortable with certain aspects of data processing, they can limit data processing by requesting their data not be used in certain ways. However, any processing that has been carried out remains valid.
Right of rectification – If a data subject finds any inaccuracies within the data that has been processed, they can request changes be made to rectify those errors.
Right to erasure – Perhaps the most well-known of the new data rights, the “right to be forgotten” ensures that data subjects can have their data completely deleted in some circumstances.
Right to complain – If the data subject feels that they have been treated unfairly by a controller or processor, they can make a formal complaint to a supervisory authority.
When a data subject submits a request through this process Submit[s] a Data Subject Access Request (DSAR), the request is relayed to the relevant department or group in the university for processing. Depending on the type of request the department or group may authenticate your identity and jurisdiction before proceeding because some actions are irreversible.
...