Terms and conditions

Data protection act

The Data Protection Act (1998) regulates the use of information relating to individuals and was extended by the Freedom of Information Act (2005) to include information stored on non-computerised systems.  The Data Protection Act is enforced by the Information Commissioner's Office (ICO) and like all organisations that process personal data the Commission must comply with the Act. 

A full copy of the Data Protection Act is available on the ICO's website, however good compliance with the Data Protection Act can be broadly equated to compliance with the eight Data Protection principles:

  1. fair and lawful processing
  2. processed for limited purposes
  3. adequate, relevant and not excessive
  4. kept accurate and up to date
  5. not kept longer than necessary
  6. processed in accordance with the individual's rights
  7. secure
  8. not transferred to countries outside European Economic area unless the country has adequate protection for the individual.

The Gambling Commission is committed to complying with the Data Protection Act, particularly with the rights of Data Subjects. Our data protection policy is available for you to download: Data protection policy statement - May 2011

To make a subject access request or to exercise any other rights under the Data Protection Act, email us or write to:

The Information Manager
Gambling Commission
Victoria Square House
Victoria Square
Birmingham
B2 4BP
Fax: 0121 230 6720

If you are unable to communicate your request for information in written format please contact our enquiry line on 0121 230 6666.

Page last reviewed: July 2011