Your Data Rights

You have a range of rights under GDPR. The CAO and the HEIs have agreed that you may exercise these rights with the CAO, who will in turn inform any HEI you apply to. For example, if you successfully request to the CAO that your data is deleted, the CAO will also pass on your request to all HEIs that you have applied to.

Please note: this does not prevent you from contacting the HEI you have applied to directly to exercise your rights.

You can contact the CAO to request a copy of your personal data that is held on our system - click on the relevant section below to begin this process. Please note: for general data queries, for example a previous year's CAO application number, please use the Contact facility. Personal data transferred to the HEI directly by an applicant, and personal data created by the HEI and not transferred to the CAO, are outside the scope of this agreement. If the data does not relate to an application, in order for the CAO to provide access to this data you may be required to provide information that will allow the CAO to identify you.

The legal basis for processing your overall application is a contract with the CAO, therefore, it is not possible to withdraw consent for the overall application. However, you may withdraw consent for the processing of your personal data in relation to the two access schemes administered by the CAO, which are: the Higher Education Access Route (HEAR) and the Disability Access Route to Education (DARE). You can request in writing to the CAO to withdraw your consent to allow the CAO to process your personal information for these schemes - click on the relevant section below to begin this process.

You can request in writing to the CAO to rectify any incorrect data which CAO holds on file for you - click on the relevant section below to begin this process. Please note: for current year applicants, you can change most of your personal details using the My Application facility, with the exception of your name and/or date of birth. If you are a current year applicant and you need to change your name and/or date of birth, please use the Contact form.

You can request in writing to the CAO to have your personal data which you provided to CAO, and that we hold on file for you, erased - click on the relevant section below to begin this process. Please note that this right includes documentation sent as part of your application to the CAO. This documentation will be shredded and disposed of in confidential waste.

Under GDPR you have a range of rights, the most common of which are outlined above. Where you wish to exercise another of these right please contact the DPO directly.