Data Protection & Freedom of Information Office

Access to Personal Data

Under Data Protection law, an individual has a right to access the information that an organisation holds on them. Data Protection law provides a formal procedure for individuals to ask for access to and copies of their personal data.  This is called a Subject Access Request (SAR).

• More information about Subject Access Requests

Data Protection law also requires an organisation that processes personal data to have in place procedures to control access to that data. The procedures may cover authorisation, authentication, and the purpose and consent for the processing.