Processing Data Rights Requests - Name and Address Changes

Under the General Data Protection Regulation (GDPR), individuals are granted specific rights to control their personal data. These rights are designed to give people greater transparency and control over how their information is collected, processed, and stored by organizations. The key rights include:

 

  • Right to Access: Individuals can request access to their personal data and how it is being used.
  • Right to Rectification: Individuals can request corrections to any inaccuracies in their personal data.
  • Right to Erasure: Also known as the 'right to be forgotten,' individuals can request the deletion of their personal data under certain conditions.
  • Right to Restriction of Processing: Individuals can ask to limit how their data is used.
  • Right to Data Portability: Individuals can request their data be transferred to another organization in a structured, commonly used format.
  • Right to Object: Individuals can object to the processing of their data in certain circumstances, such as for direct marketing purposes.

Understanding and processing these rights correctly is essential for GDPR compliance. This guide will teach staff how to respond to and process requests from individuals exercising their GDPR rights.

Our system helps us and user easily navigate the GDPR rights allowing users to quickly submit various GDPR Rights requests and our team to process, monitor and report on these requests.

Platform users can make changes to their account and submitted GDPR related requests via their Profile / Settings section, under the Privacy tab, when logged into the platform. It is important to note that users must not be forced to submit the request through this method and the firm must also take GDPR requests etc via other forms of communication such as email, phone etc.

From this section on their account they can:

  1.          request changes to their names – and provide evidence
  2.          Update their Address
  3.          Update their email address
  4.          Submit a Subject Access Request
  5.          Request their account is closed and erased.

Lender Settings page

Once a user initiates any of these six actions, this will trigger a variety of actions that will need to be completed by the admin team in order to process the changes requested, process the SAR or action the closure of the account.