Introduction

Section 7 of the Data Protection Act 2018 entitles individuals to request and receive a copy of any information held about them by an organisation. Individuals may be:

told whether any personal data is being processed;
given a description of the personal data, the reasons it is being processed, and whether it will be given to any other organisations or people;
given a copy of the information comprising the data; and given details of the source of the data (where this is available).

Requesting Information

If you wish to request details of information held about you by the College please email dataprotection@escg.ac.uk.

Following your request, the College will contact you to verify that your credentials match those of the individual for whom you are requesting information.

Information you will receive

Unless the information you have requested is covered by an exemption we will send it to you. Details of exemptions that may apply can be found on the legislation.gov.uk website. If we are unable to release the information to you we will tell you the reason, including any exemptions that apply.

Timescales

We will send you the information as soon as we can. The Act gives the College 30 days (plus a further 60 days in complex cases) to respond following receipt of the request and the information needed to confirm your identify.