Welcome to Data Protection at UEA
The University is a registered data controller. When we collect and use personal data about our students, staff, website and campus visitors and other individuals we are subject to UK data protection law. Our privacy notices below explain how we use personal data, and our data protection policy sets out how personal data will be managed by the University, and explains responsibilities.
To find out more about data protection at UEA and your privacy rights, see the links below or contact our data protection team at dataprotection@uea.ac.uk.
Privacy notices
These notices give you a clear explanation about how the University of East Anglia collects and uses your personal information, and explains:
Who we are
What information we collect about you
How and when we collect this information
Why we collect and how we use this information
Who we may share your information with
How long we keep your information
Your rights
How to contact us
Changes to the privacy notice
These privacy notices are regularly reviewed. If we need to gather your information for a reason not listed here we will let you know by means of a specific notice, seeking your consent where necessary.
In addition to the privacy notices listed below, we have published Further Information which includes some additional information on security and the potential legal basis for processing personal data.
Your rights
UK data protection law gives people a wider range of rights in relation to their personal data. The rights are as follows:
The right to be informed (meaning the right to be told how your data will be used, for example by means of a privacy notice)
The right of access to your personal data held by an organisation
The right to have inaccurate data corrected
The right to erasure (known as 'the right to be forgotten')
The right to restrict processing of your personal data
The right to data portability
The right to object
Rights in relation to automated decision making and profiling
Some of these rights won't apply in all circumstances, but they do give you a good deal of control over how your information is used by organisations such as UEA.
You can read more about your data protection rights on the Information Commissioner's website, including how to exercise your rights with organisations that process your personal data.
Exercising your Right of Access
One of the most common ways in which people exercise their data protection rights is to request a copy of the information an organisation holds about them.
If you would like to make a request to UEA for the data we hold about you, see requests for personal information.