Requesting information under the Data Protection Act

Under the Data Protection Act (DPA) you have the right to find out whether we hold any information about you, and if so, what it is. The Act also prohibits the misuse of your personal details.

The DPA includes eight principles, which govern how your personal information is used. It must be:

fairly and lawfully processed
processed for limited purposes
adequate, relevant and not excessive
accurate
not kept longer than necessary
processed in accordance with your rights
kept secure
not transferred abroad without adequate protection

The Act provides stronger protection for sensitive information such as political opinions, religious beliefs, sexual life and criminal history.

The Department must supply information within 40 days of your request.

In certain circumstances, you have the right to prevent further processing of your personal details, or to order the correction, blocking or erasing of inaccurate data. You may also claim compensation for any distress caused by a breach of the Act.