Right of access
Individuals have the right to access and receive a copy of their personal data, and other supplementary information.
This is commonly referred to as a subject access request or ‘SAR’.
Individuals can make SARs verbally or in writing, including via social media.
A third party can also make a SAR on behalf of another person.
In most circumstances, we cannot charge a fee to deal with a request.
We should respond without delay and within one month of receipt of the request.
We may extend the time limit by a further two months if the request is complex or if you receive a number of requests from the individual.
We should perform a reasonable search for the requested information.
We should provide the information in an accessible, concise and intelligible format.
The information should be disclosed securely.
We can only refuse to provide the information if an exemption or restriction applies, or if the request is manifestly unfounded or excessive.
More detailed information on these principles and other rights you have as data subjects can be found here: https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/ and Right of access | ICO