CHAPTER 10: SUBJECT ACCESS UNDER THE DATA PROTECTION ACT
In principle a data subject has the right to know all the personal data that a data controller holds about them. If they make a request to see information about them held by a public authority, even if they mistakenly quote the Freedom of Information Act in their request, it should be treated as a subject access request.
The basic position is that when someone makes a valid subject access request they are entitled to:
• be told whether any of their personal data is being processed by or on behalf of the data controller;
• be given a description of the data, why it is held and broadly who it may be disclosed to;
• have a copy of all the actual personal data;
• be told the source of ...
Get Data Protection vs. Freedom of Information now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
