Data protection requests

The Data Protection Act 1998 gives you the right to request access to personal information held about yourself. This right to access is subject to exemptions which may affect our ability to supply information.

You are entitled to know:

  • Whether we hold any personal data concerning yourself
  • For what purposes the data are processed
  • The recipients or classes of recipients to whom the data are or may be disclosed
  • Any information we have about the source(s) of the data

You are also entitled to be given a copy of the personal information with any technical terms explained.

Making a request

To request access to your personal information, please email or write to:

Data Protection Officer
Polaris House

What happens next?

We will deal with your request promptly, and within a maximum of 40 working days.

Not satisfied?

If you feel that we have not dealt with your request in accordance with the Data Protection Act, you can take further action.

You can write to the information commissioner, who will assess whether we have complied with the act. They may issue enforcement proceedings if satisfied that we have contravened one of the data protection principles. For more details and information regarding complaints about data protection, visit the Information Commissioner’s Office website.

Alternatively you can apply to the court alleging a failure to comply with the subject access provisions of the act. The court may make an order requiring compliance with those provisions and may also award compensation for any damage suffered as a result, and any associated distress.