You have the right to:
- Know what personal data is held about you
- Access your personal data by making a Subject Access Request
- Have inaccurate personal data corrected
- Ask for your personal data to be deleted if it is held unlawfully
- Object to how your personal data is being used
- Ask for processing of your personal data to be restricted while a concern is reviewed
- Receive your personal data in a portable format in certain situations
- Make a complaint to the Information and Data Protection Office if your rights are not respected
What Is personal data?
Personal data is any information that relates to you and can identify you.
This includes:
- Your name
- Contact details
- Identification numbers
- Online identifiers
- Any other information that can be linked to you
Personal data can be held in paper records, computer systems, emails, databases and other recorded forms.
When can your data be used lawfully?
Your personal data can only be used when there is a lawful reason to do so.
Your data may be used when:
- You have given consent
- Use of your data is required by law
- A public authority needs it to carry out its legal functions
- It is necessary to protect vital interests such as health and safety
- It is needed for legitimate interests and your fundamental rights are not overridden
Protection from reprisal
You must not be treated unfairly for using your rights under this Act.
No organisation or public authority is allowed to disadvantage you because you asked for your data, made a request or made a complaint.
All authorities must act in good faith when dealing with your rights.

