how to make a subject access request
The Data Protection Act entitles individuals to request access to personal information that the Union is holding about them. This is known as a Subject Access Request. Requests must be made in writing on the application form below. Persons making the request will also be required to confirm their identity.
To request information held about yourself, please follow the steps below:
- Print out and complete the from below
- Enclose copies of 2 documents as proof of your identity
- Send all documents to the Information and Data Compliance Officer, uea(su), Union House, UEA, Norwich, NR4 7TJ
what happens to a request
On receipt of all relevant documentation the Information Policy and Compliance Manager will contact the appropriate departments to obtain the data. In order to locate the correct information the Information Policy and Compliance Manager may ask the person making the request to give an indication of the types of data they wish to see, what activity the information might relate (being a member of a student group, employment, ticket purchase) where they believe the data is being stored.
The Information Policy and Compliance Manager will consider the rights of third parties who have contributed information to the individual's file(s). If possible, third parties will be anonymised prior to the information being released, if this is not possible, the consent of the third party to release the information to the person making the request will be sought. Where consent cannot be obtained or is refused, the Information Policy and Compliance Manager will consider whether it is reasonable to release the information in accordance to the Data Protection Act.
Some kinds of information are exempt under the GDPR.
Where appropriate, the information will be released to the person making the request. All requests will be dealt with within 40 calendar days.
subject access request form