Bpp learning Media is an acca approved Content Provider

Restrict processing 
Data subjects can have restrictions placed on the processing of their data or 
have it suppressed altogether. The data can still be held, but it must not be 
processed. They can request the restriction verbally or in writing. The right 
only applies in certain circumstances and the individual must be given a 
response within one month. 
Data portability 
Data subjects can request to be sent the data held about them so they can 
reuse it in a different service. For example, data held by an online banking 
app can be requested and transferred to another app that can make use of it 
(such as a money manager type app). 
To object 
Data subjects can object to the processing of their data. Where the data is 
used in connection with direct marketing there is an absolute right to object. 
Where the data is used for other purposes, this right can be refused if there 
is a compelling reason to do so. The objection can be made verbally or in 
writing and a reply must be sent to the data subjection within one month. 
Automated decision 
making and profiling 
Other data protection rights are granted to data subjects where data held 
about them is used to make automated decisions about them, or where data 
evaluation about them is automated. For example where decisions are made 
by bank computer systems as to whether or not to lend money to an 
individual. The uses of data in this way is limited and the individual must be 
given information about the processing. They also have the right to request 
human intervention or to challenge decisions made following such 
processing. 
BPP Tutor Toolkit Copy

---

PART A: THE BUSINESS ORGANISATION, ITS STAKEHOLDERS AND THE EXTERNAL ENVIRONMENT 
 
32