Subject Access Requests
As a data subject you have the right:
- To be told whether we are processing information about you.
- To be provided with a description of the data, why we are processing it and the sorts of people or organisations we might disclose the information to.
- To be provided with a copy of the data in an intelligible and permanent form, and to be told, if we know, where the information was obtained from.
How do I make exercise my rights as a data subject?
The easiest way to make a Subject Access Request is by using our Request Form. Once completed, you can submit by email
Email: dataprotection@erewash.gov.uk
Alternatively, or if you wish to exercise one of your other rights, you can email us at the above or you can write to the Data Protection Officer at Erewash Borough Council, Ilkeston Town Hall, Wharncliffe Road, Ilkeston, Derbyshire DE7 5RP. You can also call us on 0115 9072244, or you can make a request through one of our social media channels. Please note that phone or social media requests will require a follow-up postal or email address for us to respond to, once your request is validated.
When making a Subject Access Request you may be asked to provide some means of identification. This is to safeguard all Data Subjects by making sure that we only supply information to those who are entitled to receive it. Acceptable forms of identification are a birth certificate or driving license or a photocopy of either. Original documents, if provided, will be returned to you as soon as possible.
If I am unable to make a Subject Access Request myself can I ask somebody to do it for me?
Yes, but you will need to give them authority to do so. If there is no-one who can help you then let the Data Protection Officer at the Council know and they will make arrangements for somebody to assist you if necessary.
Is there a fee to make a Subject Access Request?
There is no fee for the provision of a subject access request following the introduction of UK GDPR on the 25 May 2018.
How long will a Subject Access Request take?
We will endeavour to provide you with the requested information as soon as possible and no later than 1 (one) month from receipt of a valid request.
Can I always obtain information about myself?
Not always. The Regulation has a number of exemptions. If you make a Subject Access Request and we consider that the information concerned is exempt from any provision of the Act then we will explain why. If you disagree with our view, you can ask us to reconsider or you can take the matter up with the Information Commissioner who oversees compliance with this legislation whose details are given at the end of this page.
What can I do if I think that information you hold about me is incorrect?
Write to us explaining what you think is wrong and ask for the data to be corrected. We must tell you what we have done or intend to do within 21 days. If you do not agree with our decision, you can ask us to record that disagreement for future reference - or you can take the matter up with the Information Commissioner.
Can I claim any compensation if I think that information about me has been wrongly used?
If we have broken any of the rules or conditions established by the Regulation and you have suffered damage or distress as a result of this, then you may be able to claim compensation through the Courts. Any such claim will need to show that we had not taken reasonable care to comply with the UK GDPR.
Contact us
To get in touch about data protection contact us by email or write to the Data Protection Officer at Erewash Borough Council, Ilkeston Town Hall, Wharncliffe Road, Ilkeston, Derbyshire DE7 5RP.
The ICO
The ICO is the UK's independent body set up to uphold information rights. The ICO has a duty to promote public access to official information and protecting your personal information and provides extensive guidance on how people can exercise their rights. For more information visit the ICO Website or call 0303 123 1113.