Making a subject access request
Under Section 7 of the Act you, as a data subject, have a general right of access to any personal data held about you by a data controller.
- Electronic and paper documents.
- Email correspondence.
- Any expression of opinion about the data subject.
Formal subject access requests must be handled by the University's Data Protection Co-ordinator. There are various procedures which must be gone through before your data can be disclosed - for instance you will be asked for proof of identity and to indicate in which Schools or Units you would like the search to be conducted. You will also be charged a fee of £10.
The Act requires the University to comply with subject access requests promptly and, in any event, within forty days from receipt of the request or, if later, forty days from the day on which the Data Protection Co-ordinator has both the required fee and the necessary information to confirm your identity and to locate the data.
The Data Protection Co-ordinator will then contact the relevant Departments / Units to request your data. Once s/he has received this, s/he will check through the documents in order to remove any information which does not relate to you before forwarding the remaining material to you.
Subject Access Request form (PDF, 174 KB) form for completion.
To make a subject access request please contact:
Data Protection Co-ordinator
IT Services - Butts Wynd Building, St Andrews, KY16 9AL