The Data Protection Act gives a number of specific rights to individuals.  These are:

The Right to subject access
All individuals have the right to access copies of personal information the University holds about them either on computer or in a structured manual filing system. To find out how to make a request please view the requests for personal information page.

Right to prevent processing likely to cause damage or distress
Individuals are entitled to ask the University not to process information that would cause substantial unwarranted damage or distress to them or another person.

Right to prevent processing for purposes of direct marketing
Individuals are entitled to request, in writing, that the University does not process personal data for the purposes of direct marketing.

Rights related to automated decision making
Individuals are entitled to request that the University ensures that no decision affecting them is solely based on the processing of data by automated means, and can request that decisions are made with some human involvement.

Right to compensation
Individuals are entitled to claim compensation through the courts for any damage and distress suffered as a result of any breaches of the Data Protection Act committed by the University.

Right to recitification, blocking and destruction
If personal data is inaccurate or contains expressions of opinion based on inaccurate information, individuals have the right to have that data rectified, blocked or destroyed.

The University also provides further information for students and staff which outlines the types of information which are being collected, and the uses to which these will be put.