What is a Subject Access Request?
Subject Access Requests are a request to an organisation either verbally or in writing asking for copies of any personal information that an individual or organisation uses or stores.
You can make a Subject Access Request to find out the following information:
- What personal information an organisation holds about you;
- How they are using it;
- Who they are sharing it with; and
- Where they got your data from.
What happens when you have made a Subject Access Request?
Once you have made the request, the organisation should normally respond to you within one month. If you have a number of requests or the request is complex then it may take longer to respond. If the organisation needs more time to respond they should confirm to you within one month of you making the request why they need more time.
When an organisation responds to your request, they should normally tell you whether or not they process your personal information and if they do then should provide you with a copy of it.
It is important to note that an organisation can refuse to comply with your Subject Access Request if they think it is unfounded or excessive. You may also only receive part of the information requested, an organisation may be permitted to do this when certain exemptions apply.
What happens if you are not happy with the response?
You should first make a complaint to the organisation clearly setting out what information, if any, is missing from the request. If you have complained to the organisation directly and you do not receive a response you make a complaint directly to the Information Commissioner’s Office (ICO).
Why are Subject Access Requests important and how can Nelsons help?
Subject Access Requests are a useful tool to see what information organisations hold about you.
If you think that an organisation is purposefully withholding information from you following an Subject Access Request we can help you ascertain whether withholding such information is lawful or whether further action needs to be taken.
For further information, please contact Ruby Ashby or another member of our expert Dispute Resolution team in Derby, Leicester and Nottingham on 0800 024 1976 or via our online form.