Data Subject Access Request (DSAR)
Portland State University takes privacy and data subject rights seriously. This process is one way that a data subject can exercise their rights as they apply to data collected and processed by the University. Depending on your location, citizenship, or other factors, you might have specific rights under various privacy regulations including the General Data Protection Regulation (GDPR), various state regulations, and United States Federal regulation.
In general Portland State University provides data subjects with the following rights:
Right of access and portability – After data processing, a data subject is able to request a copy of any personal data that has been processed.
Right to object – If a data subject does not want their data to be processed, they have the right to object to data processing and prevent their data from being processed further.
Right to restrict processing – Similar to the right to object, if a data subject is not comfortable with certain aspects of data processing, they can limit data processing by requesting their data not be used in certain ways. However, any processing that has been carried out remains valid.
Right of rectification – If a data subject finds any inaccuracies within the data that has been processed, they can request changes be made to rectify those errors.
Right to erasure – Perhaps the most well-known of the new data rights, the “right to be forgotten” ensures that data subjects can have their data completely deleted in some circumstances.
Right to complain – If the data subject feels that they have been treated unfairly by a controller or processor, they can make a formal complaint to a supervisory authority.
When a data subject submits a request through this process, the request is relayed to the relevant department or group in the university for processing. Depending on the type of request the department or group may authenticate your identity and jurisdiction before proceeding because some actions are irreversible.
The system will allow the data subject to check on the status of their request and provide updates and responses. If you have any questions or concerns about this process, please contact our Data Protection Officer at DPO@pdx.edu.