Under data protection legislation an individual has the right, subject to certain exemptions, to access the personal information that an organisation holds about them. Accessing personal data in this way is known as making a subject access request. (Subject access requests are different to requests submitted under FOI legislation, which relate to information about the organisation itself.)
If you wish to make a subject access request to the Trust, your request must be made in writing (this may be in electronic form) to the Trust Data Protection Officer at firstname.lastname@example.org
On receipt of your completed request, once your identity has been verified, and sufficient details to enable us to locate the information has been obtained, the Trust is obliged to respond within 30 calendar days. The information will be supplied subject to any applicable exemptions. The data will be provided as of the date of receipt of your request.
You are entitled to submit subject access requests all year round, but please bear in mind that it may be necessary for us to extend the response period when requests are submitted over the summer holidays. This is in accordance with article 12(3) of the GDPR, and will be the case where the request is complex – for example, where we need multiple staff to collect the data.
If you have any reason to believe that the Trust has not dealt correctly with your request, please contact the Clerk to the Chair of the Trust, at email@example.com If you are still not satisfied, you should contact the Information Commissioner’s Office.