Subject Access Request
The Data Protection Act 2018 and the General Data Protection Regulations (GDPR) gives you (Data Subject) the right to apply for a copy of information about yourself. If you wish, you may appoint someone to apply on your behalf (such as an agent, parent or solicitor).
You will need to provide one of the following proof of ID before we can complete this request:
- current car insurance certificate
- UK Driving Licence
- council tax bill
- utility bill
- bank statement
This ID must show your full name and address. If you are requesting information on behalf of somebody else, we will require evidence that you are legally required to obtain this information.
What information can I request?
Be as specific as possible and ensure that the description of the information you require is clear and detailed to enable us to find the personal information you are seeking.
If we do not have enough information in order to locate what you are seeking, we may come back to you with more questions.
What happens when I make a request?
When we receive a request for information, we must respond as soon as possible, and not later than one calendar month after receiving your request.
Once your request has been received, the Data Protection Officer will liaise with the appropriate area of the council that holds the information you have requested. The information will be reviewed to establish what information you are entitled to under the Data Protection Act / GDPR.
Information which identifies other people will not be released, unless they have given their permission or there is a legal provision for sharing that data.
- View the Infomation Commissioner's Office guidance on right of access to your data
Is there any cost?
Access to personal information is free of charge. However, if an excessive amount of data is required we may make a charge for this. We will advise you of any charges before we start our detailed review of your request.
What happens if some or all my requests are refused?
The council is permitted to withhold information if it falls under one of the exemptions in the Act. If this is the case then the exemption will be noted in the response. If you are unhappy with the decision, you can contact us to ask for an internal review, which will be carried out by a different officer. If you are not happy with the results of the review, you can contact the Information Commissioner to request a review of that decision.
What happens if we don't respond
Any non-response to a Subject Access Request is classed as a breach of the Data Protection Regulation. The issue can be escalated to the ICO who will investigate and take potential enforcement action or issue the council with a fine.
Last updated Thursday, 7th April 2022