Rights of data subjects

Under the GDPR, your rights include

• the right to receive transparent information about the way in which your personal data are processed,
• the right to access your data,
• the right to rectification,
• the right to erasure (‘right to be forgotten’),
• the right to restriction of processing,
• the right to data portability,
• the right to object, and
• the right to not be subject to automated decision-making.

You have the right to access the following information:

• the contact details of the controller and, where applicable, the data protection officer
• the purposes for which your personal data are processed,
• the categories of personal data that are processed,
• the recipients or categories of recipients of your personal data, and
• the period for which your personal data will be stored.

You have the right to know whether your personal data are being processed for automated decision-making purposes. If you suspect that your personal data are being used contrary to data protection laws, you can ask the Data Protection Ombudsman to investigate. 

It is the controller’s responsibility to openly explain how you can exercise your rights. 

Exercising your rights in respect of the police

These pages explain your rights as a data subject in more detail. We also tell you how you can exercise these rights in respect of the police.

For example, we explain how you can

• access your data,
• ask us to correct or erase any inaccurate or unnecessary personal information that we have about you, and
• ask the Data Protection Ombudsman to exercise your rights on your behalf.

Restrictions on data subjects’ rights

Your data protection rights may be restricted in some circumstances.

Your right to have your data erased is limited when the police is processing your data in connection with its statutory duties. You cannot use your right to be forgotten to ask to have your data removed from, for example, the police’s case management system.

The police can also restrict your right of access or your right to be told about the processing of your personal data in some circumstances.

However, these rights can only be restricted in special cases defined by law. You have the right to request a written certificate from the controller if your rights are being restricted. You can read more about this under Restrictions on the right of access. 

Instruction

Rights of data subjects and data protection at the police -instruction