Accessibility statement

Rectification 

Under the GDPR, individuals are entitled to have inaccurate or incomplete personal data corrected or a supplementary statement incorporated into the record. 

Where personal data has been disclosed to other parties, it is the University’s responsibility to contact each recipient and inform them of the need for correction unless this would be impossible to do or involve disproportionate effort.

If you believe the University holds inaccurate or incomplete personal data relating to you, please notify dataprotection@york.ac.uk.

In line with our legal obligations, we will respond to requests for rectification within one month of receipt. In certain circumstances, the University may extend the timeframe for compliance by a further two months where requests are complex or numerous. Where this is done, the University will inform you of the intended extension within one month of receipt of the request and explain why the extension is necessary. 

Where the University decides not to make any amendment in response to a request for rectification, we will explain our reasoning and inform you of your right to complain to the Information Commissioner’s Office and to seek a judicial remedy.