Data protection laws in the UK give people a number of rights concerning their personal data. Not all rights apply equally to all our processing activity as certain rights are not available depending on the lawful basis for the processing.
When you view an entry in our register of processing activities, we have highlighted which rights apply and which may not. To help understand why some may not apply the following should help.
Examples of where rights may not apply – where our lawful basis is:
- Public Interest (Task) then rights of erasure, portability do not apply.
- Legal Obligation then rights of erasure, portability, objection, automated decision making and profiling do not apply
If you require further detail each link below will take you to the Information Commissioner’s Office’s website where further detail is provided in section ‘When does the right apply’.
These rights are:
5. Right to restrict processing
8. Rights in relation to automated decision making and profiling.
We want you to feel confident that we look after everyone’s personal data in line with the law. If you have any questions about your rights, you can get in touch with us at enquiries@nhsdigital.nhs.uk.