Under the terms of the Data Protection Act 2018, an individual has rights to the data we as a data controller are holding and processing that identify them, this includes the right to access and receive copies of your information, the right to request that your information is corrected, the right to have your information erased and the right to restrict or object the processing of your information.
The information, which the individual is entitled to receive from the authority, includes a description of these purposes, recipients to whom the data are disclosed and sources of the data. This entitlement is known as the "Individual Rights".
There is no fee to make a individual rights requests. Proof of entitlement may be required. We may need to clarify your request if we are unclear exactly what you require. Under the Data Protection Act 2018, the Council has 1 calendar month in which to respond to a request. The start date is from the date the request is clarified, if appropriate, and all identification documents are received.
Submit a request if you are the subject matter (link is external)
Submit a request if on behalf of the subject matter(link is external)
To discuss a request or find out more about the Councils information rights process please email data.protection@surreyheath.gov.uk(link sends e-mail)
Further information on making a Data Subject Access Request can be found from the Information Commissioners Office
If you are not satisfied with the Councils handling of your personal information or you believe you data has been inappropriately used or breached, you can submit a complaint to the Data Protection Officer (DPO) at data.protection@surreyheath.gov.uk, please ensure you add your full name and address and any SHBC reference numbers to your complaint. The DPO or appropriate person if the DPO is not available, will undertake an initial investigation within 72 hours to determine the extent of the breach and put in place any immediate mitigations.