Chapter 3 of the Data Protection Act 2018 entitles individuals to request and receive a copy of any information held about them by an organisation. Individuals may be:

• told whether any personal data is being processed;
• given a description of the personal data, the reasons it is being processed, and whether it will be given to any other organisations or people;
• given a copy of the information comprising the data; and given details of the source of the data (where this is available).

If you wish to request details of information held about you by the College please use the Information Requests Form

Following your request, the College will contact you to verify that your credentials match those of the individual for whom you are requesting information.

Unless the information you have requested is covered by an exemption we will send it to you. Details of exemptions that may apply can be found on the legislation.gov.uk website. If we are unable to release the information to you we will tell you the reason, including any exemptions that apply.

We will send you the information as soon as we can. The Act gives the College one calendar month to respond following receipt of the request, the fee (if required) and the information needed to confirm your identify.This timescale may be extended under certain circumstances. If this happens you will be notified of this and the estimated date of response.

Schedule 1, Part 4 of the Data Protection Act 2018 requires the Group to have in place an ‘Appropriate Policy Document’, when we rely on certain conditions for processing Special Category and Criminal Offence data. A copy of this policy can be viewed here