How to apply for a Subject Access Request - Data Protection - University of Derby

How to apply for a Subject Access Request


You can request to see the information we hold about you under S7 (Section seven) of the Data Protection Act 1998, this is called a subject access request.

You can make a written request, pay the fee of £10 and be entitled to:

  • Be told whether any personal data is being processed
  • Be given a description of the personal data, the reasons it is being processed, and whether it will be given to any other organisations or people
  • Be given a copy of the information comprising the data
  • Be given details of the source of the data (where this is available)

Fees and how to apply

The fee for a SAR (subject access request) is £10. To make a subject access request you need to complete the following:

  • A request in writing
  • The application form (Subject Access Request Form)
  • Provide suitable proof of identity (birth certificate, driving licence)
  • Provide sufficient details to locate the information you are requesting
  • Pay a fee of £10

The more details that you can provide, the easier it will be for us to make sure that you get the information you want.

If you need help to apply

You can appoint someone to act as an agent to make the request on your behalf. Proof of your consent will need to be given.

We will acknowledge your application and we may contact you in order to clarify the information that you have requested. 

We are legally obliged to provide you with the information you are entitled to under the Data Protection Act 1998 within forty calendar days, unless an exemption applies. The forty days are from the date of receiving a complete valid request.

Need Advice?

Contact or call (01332) 592151

Our Data Protection Officer is James Eaglesfield (01332) 591762
Our Deputy Data Protection Officer is Helen Rishworth (01332) 591954