About the Data Protection Act
The Data Protection Act (DPA) places obligations on us as the data controller while giving rights to you as the data subject. It imposes stringent requirements that any organisation holding personal information must comply with. The legislation states that all processing undertaken must be:
- fair and lawful; and
- used only for a defined purpose; and
- adequate, relevant, not excessive; and
- accurate and up-to-date; and
- deleted when no longer required; and
- processed in accordance with the data subject's rights; and
- kept secure; and
- not transferred to other countries without adequate protection.
Access your data
You are entitled to see the information that we hold about you on receipt of a written request, providing that you give us sufficient information to enable us to locate it. If no data is held, or the data falls into a category exempted from disclosure, you will be notified in writing of this.
In all cases we will respond within a statutory maximum limit of 40 calendar days of receiving your full request, either with the information required, or with an explanation of any delays. You can download and complete the form attached to request a copy of your personal information. We are allowed to charge for each request and the current fee is £10.
For further information, please contact:
Freedom of Information and Data Protection
- Telephone: 01733 452533
- Email: firstname.lastname@example.org