How we handle subject access requests
Your request for information will be logged and stored in our electronic filing system. Each case file includes the original request, information you've provided to us and any other information relevant to the request.
We may share the details of your request between our internal departments, depending on the subject matter.
If you are making a request for your personal data (or acting on behalf of someone making a request), you’ll need to provide proof of identity. If it's relevant, we'll also ask for information to show you have authority to act on someone else's behalf.
If your request is about information we’ve received from another organisation, we’ll ask the relevant organisation for their view on whether we can disclose the material.
How long we hold your details for
The retention period is set at 3 years from the date of the last action. All information is held in line with the our retention schedule.
Why we keep requests
We keep details of requests to compile statistical reports on performance. We also use them for staff training and development.
Sharing of personal data
We may share your personal data with the Information Commissioner's Office (ICO) as the supervisory authority when required.
Your rights
If you want to know more about your rights, please refer to the Your Rights section in our privacy statement.
Previous pageHow to make a subject access request Next page
Make a subject access request
Last updated: 14 March 2024
Show updates to this content
Updated retention policy.