Valid subject access requests require:
- Full name
- A clear indication that you wish to obtain information which may be held about you, in writing or verbally
- Proof of identity - two forms, one photograph with proof of address, taken within the last three months
We cannot release data unless all of the above requirements are met.
While subject access request do not have to be made in writing, it is recommended that you submit your requests in writing to ensure that these are processed without delay.
We have a subject access request form which you may like to use or if you prefer, you can write an email or a letter to us. Your request can be emailed to firstname.lastname@example.org or posted to:
Data Protection Officer, Offices of the Vice-Chancellor, University of Wolverhampton, Wulfruna Building, Wulfruna Street, Wolverhampton, WV1 1LY.
If you require assistance in completing the form or making a written request, please contact us via telephone on 01902 321000 or via email at email@example.com and we will be happy to help you.
The following individuals can request personal information from the University:
- The individual whose information is held (the data subject)
- A third party acting on behalf of the individual - evidence that they are acting on behalf of that individual must be provided, by signed authority along with sufficient ID as stated above.
If you are a member of staff and have requested to see your HR file, you will be invited to the University to view your file.
If you have requested data, depending on the volume of data we may contact you and ask if it is more preferable for it to be supplied in electronic format. Otherwise we will supply hard copies of data.
There may be a restriction on the data you are provided. The Data Protection Legislation provides for certain exemptions which mean we may not be able to disclose it to you. For example, we are unable to provide third party data or data which would affect a Police investigation. If this is the case we will contact you and let you know the reasons why we are unable to provide the information.
If we do not hold any information we will confirm this in writing to you.
Under the Data Protection Legislation the University is required to respond to subject access requests within one month from the day after receipt of the request. Please note the one month period begins from receipt of the request and sufficient ID. Therefore, it is suggested you send all your documentation as early as you can to avoid any delay.
If you are unhappy with the subject access response, please let us know by contacting the DPO by:
- Email at firstname.lastname@example.org
- Post at Data Protection Officer, Offices of the Vice-Chancellor, University of Wolverhampton, Wulfruna Building, Wulfruna Street, Wolverhampton, WV1 1LY.
If you remain unsatisfied with the University's response please contact the Information Commissioner. Further details on how to contact the Information Commissioner can be found on their website at www.ico.org.uk.
If you think the information we hold is incorrect, you are advised to contact us in writing and ask us to review the data. You may contact us by email at email@example.com or by post at Data Protection Officer, Offices of the Vice-Chancellor, University of Wolverhampton, Wulfruna Building, Wulfruna Street, Wolverhampton, WV1 1LY.
The Police and other law enforcement agencies or regulatory bodies can request access to individuals ' personal information, as long as the reason for doing so satisfies one of the exemptions to the data protection principles, under the schedules to the Data Protection Act 2018. For example, the Police may need to request an individual's personal information for the detection or investigation of a crime; or a local authority can request an individual's personal information for council tax purposes.
More information on these exemptions can be found here:
Individuals who wish to enquire about the data the University holds on them are required to make a 'subject access request'. Detailed below is the process for requesting access to the personal information we may hold.