{"id":12063,"date":"2023-07-05T03:50:16","date_gmt":"2023-07-05T03:50:16","guid":{"rendered":"https:\/\/www.theukrules.co.uk\/?page_id=12063"},"modified":"2023-10-12T09:13:20","modified_gmt":"2023-10-12T09:13:20","slug":"respond-to-a-data-protection-request","status":"publish","type":"page","link":"https:\/\/www.theukrules.co.uk\/rules\/business\/sale-of-goods-and-services\/respond-to-a-data-protection-request\/","title":{"rendered":"Responding to a Data Protection Request UK | Right of Access"},"content":{"rendered":"<p><strong>RIGHT OF ACCESS<\/strong>: It falls under GDPR data protection law and it allows any individual to ask whether an organisation holds personal information about them.<\/p>\n<p>Organisations must respond to a data protection request without delay (taking no longer than one (1) month to answer). Individuals have the right to access personal information being kept about them, such as:<\/p>\n<ul>\n<li>What information the organisation is using.<\/li>\n<li>Why they are storing and using it.<\/li>\n<li>Where the personal details originated from.<\/li>\n<li>Who else has access to the information.<\/li>\n<\/ul>\n<p><strong>Note<\/strong>: As a rule, responses to personal data requests must be free of charge. But, organisations may charge an administration fee for providing extra copies.<\/p>\n<p><\/p>\n<hr>\n<p><\/p>\n<h2>Providing Data to Individuals<\/h2>\n<p>The information you need to give is specific when responding to a data protection request. Thus, the organisation would need to provide the individual with:<\/p>\n<ul>\n<li>Confirmation that they are processing their personal data.<\/li>\n<li>A copy of the data (e.g. in electronic or printed format).<\/li>\n<li>Details of how they collect the data, how they use it, and how they dispose of it.<\/li>\n<\/ul>\n<p><strong>Note<\/strong>: In most cases, you should send a subject access request as a hard copy (e.g. a printout or a photocopy). But, receiving one by email means you can also answer it by email (providing the requester agrees to it).<\/p>\n<p><\/p>\n<hr>\n<p><\/p>\n<h2>Explaining the Content of Information<\/h2>\n<p>The organisation must ensure the individual can understand the information given to them. An example might be explaining what certain codes mean if used by the company.<\/p>\n<p>Any response to a data protection request should be:<\/p>\n<ul>\n<li>Concise and transparent<\/li>\n<li>Intelligible<\/li>\n<li>In a format that is easily accessible<\/li>\n<li>Written in clear and plain language (especially when giving answers about a child)<\/li>\n<\/ul>\n<p><strong>Note<\/strong>: There are a raft of <a href=\"\/rules\/business\/sale-of-goods-and-services\/data-protection\/\">data protection regulations for business<\/a> in United Kingdom. But, the laws do not force organisations to translate right of access information.<\/p>\n<p><\/p>\n<hr>\n<p><\/p>\n<h2>Before Replying You Must:<\/h2>\n<p><\/p>\n<ul>\n<li>Confirm the identity of the requester.<\/li>\n<li>Remove any data that does not relate to them.<\/li>\n<\/ul>\n<p><strong>Note<\/strong>: to respond to a subject access request (or not giving the information requested) can result in a fine!<\/p>\n<p><\/p>\n<hr>\n<p><\/p>\n<h2>Data Protection Act Exemptions<\/h2>\n<p>In some cases, an exemption means you may not need to give out all the personal information that you have on someone. As a rule, exemptions apply if it relates to another person or it contains legal advice.<\/p>\n<p><\/p>\n<hr>\n<p><\/p>\n<h2>Further Help and Information<\/h2>\n<p>The Information Commissioner&#8217;s Office (ICO) upholds information rights in the public interest. You can get further details about the <a href=\"https:\/\/ico.org.uk\/for-organisations\/guide-to-data-protection\/guide-to-the-general-data-protection-regulation-gdpr\/individual-rights\/right-of-access\/\" target=\"_blank\" rel=\"noreferrer noopener\">right of access<\/a> for individuals on the ICO website.<\/p>\n<p><\/p>\n<hr>\n<p><\/p>\n<div class=\"updated-data\"><strong>How to Respond to a Data Protection Request in United Kingdom<\/strong><br \/>\n<time datetime=\"2022-01-01\">Last Updated 2022<\/time><\/div>\n","protected":false},"excerpt":{"rendered":"<p>RIGHT OF ACCESS: It falls under GDPR data protection law and it allows any individual to ask whether an organisation holds personal information about them. Organisations must respond to a data protection request without delay (taking no longer than one (1) month to answer). Individuals have the right to access personal information being kept about&hellip; <a class=\"more-link\" href=\"https:\/\/www.theukrules.co.uk\/rules\/business\/sale-of-goods-and-services\/respond-to-a-data-protection-request\/\">Continue reading <span class=\"screen-reader-text\">Responding to a Data Protection Request UK | Right of Access<\/span><\/a><\/p>\n","protected":false},"author":2,"featured_media":0,"parent":778,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"inline_featured_image":false,"footnotes":""},"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v22.2 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Responding to a Data Protection Request UK | Right of Access - UK Rules<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.theukrules.co.uk\/rules\/business\/sale-of-goods-and-services\/respond-to-a-data-protection-request\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Responding to a Data Protection Request UK | Right of Access - UK Rules\" \/>\n<meta property=\"og:description\" content=\"RIGHT OF ACCESS: It falls under GDPR data protection law and it allows any individual to ask whether an organisation holds personal information about them. Organisations must respond to a data protection request without delay (taking no longer than one (1) month to answer). Individuals have the right to access personal information being kept about&hellip; Continue reading Responding to a Data Protection Request UK | Right of Access\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.theukrules.co.uk\/rules\/business\/sale-of-goods-and-services\/respond-to-a-data-protection-request\/\" \/>\n<meta property=\"og:site_name\" content=\"UK Rules\" \/>\n<meta property=\"article:modified_time\" content=\"2023-10-12T09:13:20+00:00\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.theukrules.co.uk\/rules\/business\/sale-of-goods-and-services\/respond-to-a-data-protection-request\/\",\"url\":\"https:\/\/www.theukrules.co.uk\/rules\/business\/sale-of-goods-and-services\/respond-to-a-data-protection-request\/\",\"name\":\"Responding to a Data Protection Request UK | Right of Access - UK Rules\",\"isPartOf\":{\"@id\":\"https:\/\/www.theukrules.co.uk\/#website\"},\"datePublished\":\"2023-07-05T03:50:16+00:00\",\"dateModified\":\"2023-10-12T09:13:20+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/www.theukrules.co.uk\/rules\/business\/sale-of-goods-and-services\/respond-to-a-data-protection-request\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.theukrules.co.uk\/rules\/business\/sale-of-goods-and-services\/respond-to-a-data-protection-request\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.theukrules.co.uk\/rules\/business\/sale-of-goods-and-services\/respond-to-a-data-protection-request\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.theukrules.co.uk\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Alphabetical List of United Kingdom Rules and Regulations\",\"item\":\"https:\/\/www.theukrules.co.uk\/rules\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"UK Business Finance Rules and Regulations 2022 Overview\",\"item\":\"https:\/\/www.theukrules.co.uk\/rules\/business\/\"},{\"@type\":\"ListItem\",\"position\":4,\"name\":\"Regulations for Sale of Goods and Services in United Kingdom\",\"item\":\"https:\/\/www.theukrules.co.uk\/rules\/business\/sale-of-goods-and-services\/\"},{\"@type\":\"ListItem\",\"position\":5,\"name\":\"Responding to a Data Protection Request UK | Right of Access\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.theukrules.co.uk\/#website\",\"url\":\"https:\/\/www.theukrules.co.uk\/\",\"name\":\"UK Rules\",\"description\":\"The UK Rules\",\"publisher\":{\"@id\":\"https:\/\/www.theukrules.co.uk\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.theukrules.co.uk\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.theukrules.co.uk\/#organization\",\"name\":\"UK Rules\",\"url\":\"https:\/\/www.theukrules.co.uk\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.theukrules.co.uk\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.theukrules.co.uk\/wp-content\/uploads\/2023\/02\/logo-white.svg\",\"contentUrl\":\"https:\/\/www.theukrules.co.uk\/wp-content\/uploads\/2023\/02\/logo-white.svg\",\"width\":191,\"height\":23,\"caption\":\"UK Rules\"},\"image\":{\"@id\":\"https:\/\/www.theukrules.co.uk\/#\/schema\/logo\/image\/\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Responding to a Data Protection Request UK | Right of Access - UK Rules","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.theukrules.co.uk\/rules\/business\/sale-of-goods-and-services\/respond-to-a-data-protection-request\/","og_locale":"en_US","og_type":"article","og_title":"Responding to a Data Protection Request UK | Right of Access - UK Rules","og_description":"RIGHT OF ACCESS: It falls under GDPR data protection law and it allows any individual to ask whether an organisation holds personal information about them. Organisations must respond to a data protection request without delay (taking no longer than one (1) month to answer). Individuals have the right to access personal information being kept about&hellip; Continue reading Responding to a Data Protection Request UK | Right of Access","og_url":"https:\/\/www.theukrules.co.uk\/rules\/business\/sale-of-goods-and-services\/respond-to-a-data-protection-request\/","og_site_name":"UK Rules","article_modified_time":"2023-10-12T09:13:20+00:00","twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.theukrules.co.uk\/rules\/business\/sale-of-goods-and-services\/respond-to-a-data-protection-request\/","url":"https:\/\/www.theukrules.co.uk\/rules\/business\/sale-of-goods-and-services\/respond-to-a-data-protection-request\/","name":"Responding to a Data Protection Request UK | Right of Access - UK Rules","isPartOf":{"@id":"https:\/\/www.theukrules.co.uk\/#website"},"datePublished":"2023-07-05T03:50:16+00:00","dateModified":"2023-10-12T09:13:20+00:00","breadcrumb":{"@id":"https:\/\/www.theukrules.co.uk\/rules\/business\/sale-of-goods-and-services\/respond-to-a-data-protection-request\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.theukrules.co.uk\/rules\/business\/sale-of-goods-and-services\/respond-to-a-data-protection-request\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.theukrules.co.uk\/rules\/business\/sale-of-goods-and-services\/respond-to-a-data-protection-request\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.theukrules.co.uk\/"},{"@type":"ListItem","position":2,"name":"Alphabetical List of United Kingdom Rules and Regulations","item":"https:\/\/www.theukrules.co.uk\/rules\/"},{"@type":"ListItem","position":3,"name":"UK Business Finance Rules and Regulations 2022 Overview","item":"https:\/\/www.theukrules.co.uk\/rules\/business\/"},{"@type":"ListItem","position":4,"name":"Regulations for Sale of Goods and Services in United Kingdom","item":"https:\/\/www.theukrules.co.uk\/rules\/business\/sale-of-goods-and-services\/"},{"@type":"ListItem","position":5,"name":"Responding to a Data Protection Request UK | Right of Access"}]},{"@type":"WebSite","@id":"https:\/\/www.theukrules.co.uk\/#website","url":"https:\/\/www.theukrules.co.uk\/","name":"UK Rules","description":"The UK Rules","publisher":{"@id":"https:\/\/www.theukrules.co.uk\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.theukrules.co.uk\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.theukrules.co.uk\/#organization","name":"UK Rules","url":"https:\/\/www.theukrules.co.uk\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.theukrules.co.uk\/#\/schema\/logo\/image\/","url":"https:\/\/www.theukrules.co.uk\/wp-content\/uploads\/2023\/02\/logo-white.svg","contentUrl":"https:\/\/www.theukrules.co.uk\/wp-content\/uploads\/2023\/02\/logo-white.svg","width":191,"height":23,"caption":"UK Rules"},"image":{"@id":"https:\/\/www.theukrules.co.uk\/#\/schema\/logo\/image\/"}}]}},"_links":{"self":[{"href":"https:\/\/www.theukrules.co.uk\/wp-json\/wp\/v2\/pages\/12063"}],"collection":[{"href":"https:\/\/www.theukrules.co.uk\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.theukrules.co.uk\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.theukrules.co.uk\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.theukrules.co.uk\/wp-json\/wp\/v2\/comments?post=12063"}],"version-history":[{"count":6,"href":"https:\/\/www.theukrules.co.uk\/wp-json\/wp\/v2\/pages\/12063\/revisions"}],"predecessor-version":[{"id":27610,"href":"https:\/\/www.theukrules.co.uk\/wp-json\/wp\/v2\/pages\/12063\/revisions\/27610"}],"up":[{"embeddable":true,"href":"https:\/\/www.theukrules.co.uk\/wp-json\/wp\/v2\/pages\/778"}],"wp:attachment":[{"href":"https:\/\/www.theukrules.co.uk\/wp-json\/wp\/v2\/media?parent=12063"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}