Any individual who makes a valid subject access request is entitled to be:
- told whether their personal data is being processed;
- given a description of the personal data, reason for processing and whether it has been shared with any other organizations or persons;
- given details of the source of the data (where this is available); and
- given a copy of the information comprising the data.
Individuals are entitled only to their own personal data, and not to information relating to other people unless they are acting on behalf of that person. In these circumstances, written consent will be required.
Proof of identification may be requested to ensure that the personal information requested is provided to the right person. Two forms of ID will be required. One must be name identification (e.g. Driving Licence, Passport or Birth Certificate) and the other a form of address identification dated in the last three months.
IACCM will comply with requests for access to personal information as quickly as is practicable, but will ensure that the information is provided within 30 days. All subject access requests should be addressed to The Data Protection Officer and emailed to firstname.lastname@example.org.