Right of Access
This is commonly known as subject access and is the process which entitles individuals to:
- Confirmation that their data is being processed;
- Access to their personal data; and
- Other supplementary information – however all other information should be held in the relevant privacy notice, as documented above.
The purpose of right of access is to allow individuals access to their personal data so that they:
- Are aware of what data is being processed, and
- Can verify the lawfulness of the processing.
From 25 May 2018 subject access requests can be made verbally or in writing and will be free of charge, unless we consider your request to be:
- deemed as manifestly unfounded, or
- excessive or repetitive If we deem one of the above to be the case we may request a reasonable fee or refuse to process your request. If a fee is applied this will be based on the administrative cost of providing the information to you.
We must provide you with your information within one month of receipt, however we can lawfully extend this by a further two months if your request is complex or numerous. If there is a delay in dealing with your request we will inform you within one month of receipt of the request and explain why the extension is necessary. If proof of identity is sought then the one month will commence when your identity has been confirmed.
We may also be required to ask you for documents to prove your identity. If this is required then the one month will commence from the date your identity is confirmed.
If we refuse to process your request we will explain why and inform you of your right to complain to the Information Commissioner, and to a judicial remedy within one month of receipt.
If you would like to exercise your information rights then please click here.