What is a DSAR under GDPR?
DSARs are the result of the GDPR's right of access – one of eight data subject rights enshrined in the Regulation. When an individual submits a data subject access request (or SAR, as it was known under the Data Protection Act), organisations must provide them with a copy of any relevant information about them.
What does a DSAR cover?
A DSAR is a request from a data subject to be provided with a copy of the personal data being processed by a Controller and an explanation of the purposes for which personal data is being used. A DSAR is specifically when anyone asks to receive a copy of the personal data you may hold for them.
How long do you have to respond to a DSAR?
If you exercise any of your rights under EU Representatives law, the organisation you're dealing with must respond as quickly as possible. This must be no later than one calendar month, starting from the day they receive the request.
You have the right to access your personal data held by Newman University.
If you are a current student the best way to access your student information and record is by logging onto MyNewman.
Via MyNewman you can access your photo, full name, Newman and personal email address, permanent address and contact address, phone numbers, accommodation type, local education authority, date of birth, gender, ethnic origin, disability, country of domicile, nationality, UCAS number, Student Loans Company number, modules and your transcript (i.e. your results which have been confirmed by a Board.
Via MyNewman you can update your permanent address and contact address, personal email address, phone numbers and accommodation type.
You can also access your personal data on Moodle / Mahara, Turnitin, Panopto / MyCareers / Library self-serve kiosk and the E-store.
If you are a current member of staff the best way to access your staff profile, including special category data is to log onto iTrent.
In order to speed up the process for us to respond to your request data protection impact assessment, we ask that you complete Newman University’s Data Subject Request Form available for download from the bottom of this page. You can post it to us or attach it to an email. You do not have to use the form but it may help you and us if you do. If you wish for any specific documents to be located and/or areas of the University to be searched this should be indicated clearly on the Data Subject Request Form / in the request. The more specific you are and the more information that you provide us with, the better we will be able to respond to your request.
The General Data Protection Regulation (GDPR Policy Template) does not stop you making a request on someone else’s behalf. This is sometimes necessary for a solicitor acting on behalf of a client, or it could simply be that an individual wants someone else to act for them. In these cases, the University will need to satisfy itself that the person making the request has the individual’s permission to act on their behalf. It is the third party’s responsibility to provide this evidence, which could be a written authority to make the request, or a power of attorney. If a person does not have the mental capacity to manage their own affairs and you are their attorney, for example you have a Lasting Power of Attorney with authority to manage their property and affairs, you will have the right to access information about the person you represent to help you carry out your role. The same applies to a person appointed to make decisions about such matters: in England and Wales by the Court of Protection, in Scotland, by the Sheriff Court and in Northern Ireland, by the High Court (Office of Care and Protection). The General Data Protection Regulation only applies to personal information about a living individual by the terms and condition policy.
If you submit a DSAR electronically e.g. by email or an attachment to an email, we you should provide the information in a commonly used electronic format e.g. by email or an attachment to an email (such as a pdf or csv file).
If we process a large quantity of information about individuals, the law allows us to ask you to specify the information security policy template the request relates to.