{"id":199928,"date":"2026-10-15T14:22:30","date_gmt":"2026-10-15T12:22:30","guid":{"rendered":"https:\/\/www.erasmusmagazine.nl\/en\/?p=199928"},"modified":"2026-10-15T14:39:00","modified_gmt":"2026-10-15T12:39:00","slug":"tien-jaar-avg-inzage-in-je-persoonsgegevens-is-nog-geen-routineklus-voor-de-eur","status":"publish","type":"post","link":"https:\/\/www.erasmusmagazine.nl\/en\/2026\/10\/15\/tien-jaar-avg-inzage-in-je-persoonsgegevens-is-nog-geen-routineklus-voor-de-eur\/","title":{"rendered":"Ten years of the GDPR: access to your personal data is still not routine at EUR"},"content":{"rendered":"\n

This year marks ten years since the General Data Protection Regulation was adopted. It gives students and staff the right to ask what personal data the university processes about them. Medical student and EM staff member Sarah de Gruijter submitted such an access request and discovered that the process doesn’t run smoothly yet.<\/p>\n\n\n\n

\"\"

\n\t\n\n<\/svg>\n<\/span>\n\tImage by:<\/span>\n\n\t\t\t\n\t\t\t\t\t\t\tFemke Legu\u00e9<\/a>\t\t\t\t\t<\/span>\n\t<\/p>\n<\/figcaption><\/figure>\n\n\n\n

My request began on 27 May. I googled the address where I could submit my access request. The search ‘EUR personal data’ led me to the university’s privacy statement<\/a>. It sets out the types of data EUR processes, how long it keeps them and what rights students and staff have.<\/p>\n\n\n\n

At the bottom was the email address of Marlon Domingus, the data protection officer. I decided that he was the person to contact. “Under Article 15 of the General Data Protection Regulation (GDPR), I request access to the personal data that Erasmus University Rotterdam processes about me”, I emailed him.<\/p>\n\n\n\n

Domingus later told me there is an online portal<\/a> for this. The link is also on the EUR website, in a drop-down menu on the privacy statement page, but I hadn’t noticed it. According to him, the portal has been available since the GDPR came into force and is the best way to submit access requests. Domingus independently oversees compliance with the privacy law and advises the university. My email nevertheless reached the right department through him.<\/p>\n\n\n\n

The university has received 21 access requests so far this year, Domingus says. He considers that few compared with other organisations. The number is rising, though: there were 26 requests over the whole of last year and twenty in 2024. He sees two main groups of applicants: law students who want to learn how the right of access works as part of their studies, and people collecting evidence during a dismissal or employment dispute. Whatever the reason, he sees such requests as a test for the university. “For me, these kinds of requests are a measure of our reliability.”<\/p>\n\n\n\n\t

\n\t\t\t\t\t

Een lijst met artikelen<\/h2>\n\t\t\n\t\t
\n\n\t\t\t\n\t\t\t