Subject Access Requests

General Data Protection Regulation (GDPR)

 
The General Data Protection Regulations comes into force on 25 May 2018. Under GDPR you will have the right to obtain:
 
  • Access to your personal data
  • Confirmation that your data is being processed
  • Details of why we are processing your data and where necessary who it will be shared with (in the form of a privacy notice)
GDPR clarifies that the reason for allowing individuals to access their personal data is so that they are aware of and can verify the lawfulness of the processing.
 
Cost of Subject Access Requests
 
From 25 May 2018 subject access requests will be free.  However a fee can be charged in certain circumstances particularly if a request is excessive or repetitive.
 
Once a Subject Access Request is received it will be acknowledged and we will respond within one calendar month. 
 
If a request is complex or numerous then response times can be extended up to a further two months. We will inform you within one month of the receipt of the request and explain why the extension is necessary.
 
You will need to make your request in writing. The easiest way of doing this is by downloading and completing our Subject Access Request Form.  
 
Please fill in as much detail as you can as this will help us to process your application.
 
You can email the form or your request to DPO@westsomerset.gov.uk
 
Alternatively you can write to:
 
Corporate Business Support, 
Taunton Deane Borough Council, 
The Deane House, 
Belvedere Road, 
Taunton 
Somerset, 
TA1 1HE
 
Laws and regulation
 
The General Data Protection Regulation (GDPR)
 
Complaints
 
If you are not satisfied with the outcome of your request you can ask for an internal review to be carried out by our Data Protection Officer. If you remain dissatisfied following this review you can appeal to the Information Commissioners Office who is responsible for enforcing the General Data Protection Regulation (GDPR) and the forthcoming UK Data Protection Act 2018.