Module 3 · Chapter 8

Subject Access Requests: Deadlines and Searches

A person may ask for a copy of the data held about them. This chapter shows who answers when the request reaches the supplier, and how the deadline is counted.

≈ 6 min read 8-question test

In this chapter

  • What a person may ask for, and how far the search must go
  • Who answers when a request reaches the supplier instead of the customer
  • How the deadline is counted, and when the clock stops

8.1Subject access requests in one paragraph

Anyone may ask an organisation for a copy of the personal data it holds about them: a subject access request. The person the data is about is the data subject. In July, a care worker asks Tennerby’s support desk for everything it holds about her. Most of it is held for Corrandale, so Tennerby passes that part on. Tennerby answers for its own small part itself.

Key point

Each controller answers for its own data, on its own clock. Tennerby passes Corrandale’s part on quickly and never answers it itself.

Also in this chapter

  1. What a person may ask for
  2. Who answers: the customer, the supplier or both
  3. Counting the month, and stopping the clock
  4. Your job

Preview

The rest of this chapter opens with a free account. Every edition is free to read until 31 January. Open a free account by the end of that day and keep every edition published by then, for good. Open it from the edition home →