What is the right of access?
Commonly known as subject access, this right gives you the right to obtain a copy of your personal data. This right will allow you to understand how and why we are using your data, and to verify the lawfulness of processing.
What can I request under this right?
You are entitled to:
- Confirmation that your data is being processed;
- Access to your personal data; and
- Other supplementary information – you should be able to find this information held in the relevant privacy notice.
How do I make a request and what does it cost?
From 25th May 2018, subject access requests can be made verbally or in writing and will be free of charge, unless the request is manifestly unfounded or excessive. Any fee applied will be based on the administrative costs of complying with the request.
How long will it take to process my request?
We are required to provide you with you information within one month of receipt, although this can be extended by a further two months should your request be complex or numerous.
We will let you know within one month if there is expected to be a delay in dealing with your request and give you a reason for the extension. If we require proof of identification, the one month responding period will begin when your identity has been confirmed.
Can you refuse my request?
We can refuse to comply with a subject access request if it is manifestly unfounded or excessive, taking into account whether the request is repetitive in nature.
If we refuse to process your request, we will explain why and inform you of your right to complain to the Information Commissioner and to a “judicial remedy” within one month of receipt.