Subject Access Request – ICO
You have the right to get a copy of the information that is held about you. This is known as a subject access request.
This right of subject access means that you can make a request under the Data Protection Act to any organisation processing your personal data. The Act calls these organisations ‘data controllers’.
You can ask the organisation you think is holding, using or sharing the personal information you want, to supply you with copies of both paper and computer records and related information.
The organisation has to reply within 40 days, starting from the day they receive both the fee and the information they need to identify you and the information you need.
You are entitled to be told if any personal information is held about you and if it is, to be given:
- a copy of the information in permanent form;
- an explanation of any technical or complicated terms;
- any information the organisation has about where they got your information from;
- a description of the information, the purposes for processing the information and who the organisation is sharing the information with; and
- the logic involved in any automated decisions (if you have specifically asked for this).
Organisations may charge a fee of up to £10
To make your Subject Access Request, please complete and submit the form below.
There is a £10 fee payable before we release any information. This can be paid to email@example.com. If you wish to pay by Bank Transfer please contact us directly on firstname.lastname@example.org. As above our timescale of 40 days to provide the information requested will begin from the day we receive your fee.
SUBJECT ACCESS REQUEST FORM