Data Protection

Making a Subject Access Request

Introduction

Section 7 of the Data Protection Act 2018 entitles individuals to request and receive a copy of any information held about them by an organisation. Individuals may be:

  • told whether any personal data is being processed;
  • given a description of the personal data, the reasons it is being processed, and whether it will be given to any other organisations or people;
  • given a copy of the information comprising the data; and given details of the source of the data (where this is available).

Requesting Information

If you would like to request personal data that we hold about you, you can do so either verbally or in writing. To help us process your request efficiently, we kindly ask that you complete this form and submit it to Data.Protection@escg.ac.uk.
If we do not already have your details on record, we will need to verify your identity. This can be done by providing one or more of the following original documents:

  • Passport
  • Bank statement
  • Driving licence
  • Utility bill


We typically provide information free of charge. However, in certain situations, a fee may apply - for example, if a request is excessive or unreasonable. In such cases, we may charge a reasonable fee to cover the administrative costs of processing the request.

Information you will receive

Unless the information you have requested is covered by an exemption we will send it to you. Details of exemptions that may apply can be found on the legislation.gov.uk website. If we are unable to release the information to you we will tell you the reason, including any exemptions that apply.

Timescales

We will send you the information as soon as we can. The Act gives the College 30 days (plus a further 60 days in complex cases) to respond following receipt of the request and the information needed to confirm your identify.