Planning, Governance and Compliance

Right to Erasure

The General Data Protection Regulation (‘GDPR’) gives individuals a number of rights in relation to their personal data and introduced a new right for individuals to have personal data erased, also known as the right to be forgotten.

The right is not an absolute one and only applies in certain circumstances. Further details can be found in the University’s ‘Data Protection and the Right to Erasure Policy’ which sets out when the right to erasure arises, how the University will respond to such requests and what erasure means.

A request to erase data can be made in writing or verbally and the University has one calendar month to respond to the request. Requests can be made to the University’s Data Protection Officer at dpo@sussex.ac.uk. The University publishes a Right to Erasure Request Form which assists individuals in making their request and enables the University to respond more quickly.