The Data Protection Act gives rights to individuals in respect of the personal data that organisations hold about them.
The Act says that:
“Personal data shall be processed in accordance with the rights of data subjects under this Act”.
It is your responsibility to facilitate the rights of individuals, including erasure (to be forgotten), data portability, and data access. You should check your procedures to ensure they cover all the rights individuals have, including how you would delete data or provide data electronically and in a commonly used format.