As such, the University has designated the Chief Information Security Officer as the “Data Protection Officer.” In instances where the GDPR is applicable, the University, in addition to the rights enumerated in Chapter 3 of the GDPR, specifically extends the following rights to students, employees, and members of the public: <ul> <li>The right of access by the data subject</li> <li>