Data Protection Act 2018 (DPA)
You have the right to find out if HSE is using or storing your personal data. This is called the right of access. You exercise this right by asking for a copy of the data, which is known as making a ‘subject access reques’ (SAR).
What would be considered under DPA
You can make a SAR to find out what personal data we hold about you and how it is used. Requests for information which are not considered to be your personal data will be processed under an alternative and more appropriate disclosure gateway.
It's important you identify the specific data you want. Please include:
- any information used by us to identify or distinguish you from other people with the same name
- any details or relevant dates that will help us identify any information that we may hold about you
- If we do not understand what information you require, we will seek clarification from you
How long will it take?
Requests handled under DPA should be responded to within 1 calendar month of receipt. In certain circumstances we may need extra time to consider your request (up to an extra two months). We will let you know within one month that we need more time and why.
Futher information
Guidance is available on the following topics: