The Data Protection Act entitles individuals to request access to personal information that the University is holding about them. This is known as a Subject Access Request. Requests must be made in writing on the stardard application form and be accompanied by a standard fee of £10. Persons making the request will also be required to confirm their identity.
How to make a Subject Access Request
To request information held about yourself, please follow the steps below:
- Print out and complete the DPA request for information form
- Enclose a cheque for £10 made payable to the University of East Anglia
- Enclose copies of 2 documents as proof of your identity
- Send all documents to David Palmer, Information Policy and Compliance Manager, The Library, UEA, Norwich, NR4 7TJ
What happens to a request
1. On receipt of all relevant documentation the Information Policy Officer will contact the appropriate departments to obtain the data. In order to locate the correct information the Information Policy Officer may ask the person making the request to give a indication of the types of data they wish to see, or where they believe the data is being stored.
2. The Information Policy Officer will consider the rights of third parties who have contributed information to the individual's file(s). If possible, third parties will be anonymised prior to the information being released, if this is not possible, the consent of the third party to release the information to the person making the request will be sought. Where consent cannot be obtained or is refused, the Information Policy Officer will consider whether it is reasonable to release the information in accordance to the Data Protection Act.
Some kinds of information are exempt under the Data Protection Act.
3. Where appropriate, the information will be released to the person making the request. All requests will be dealt with within 40 calendar days of the receipt of payment.
