Right of access (RoA) / data subject access requests (DSAR) policy and procedure

Data subject access request

A data subject access request (DSAR) is a request made by or on behalf of an individual ('data subject') for the information held about them by Newcastle-under-Lyme Borough Council (NULBC).

An individual can make a request verbally or in writing and to any part of the organisation (including by social media) and does not have to include the phrase ‘subject access request’.

Non-personal information

If the request is for non-personal information, the individual should be notified of that.

A recommendation to submit a Freedom of Information (FoI) or Environmental Information Regulations (EIR) request should be made instead.

General data protection regulation

Under Article 15 of the UK-general data protection regulation (UKGDPR), individuals have the right to request access to their personal data as held by an organisation.

This can be information that includes application forms, employment records, or any other records which hold information relating to them.

This is subject to certain exemptions to request access and obtain copies of personal data.

Data formats

Data may be held in various formats:

• electronic

• manual

• recorded and stored in various storage formats including photographs, audio messages and CCTV footage