Right of access (RoA) / data subject access requests (DSAR) policy and procedure

A data subject access request (DSAR) is a request made by or on behalf of an individual ('data subject') for the information held about them by Newcastle-under-Lyme Borough Council (NULBC).

An individual can make a request verbally or in writing and to any part of the organisation (including by social media) and does not have to include the phrase ‘subject access request’.

If the request is for non-personal information, the individual should be notified of that and a recommendation to submit a Freedom of Information (FoI) or Environmental Information Regulations (EIR) request should be made instead.

Under Article 15 of the UK-General Data Protection Regulation (UKGDPR), individuals have the right to request access to their personal data as held by an organisation. This can be information that includes application forms, employment records, or any other records which hold information relating to them. This is subject to certain exemptions to request access and obtain copies of personal data.

Data may be held in various formats, in electronic or manual formats and recorded and stored in various storage formats including photographs, audio messages and CCTV footage.