Data Protection and Subject Access
The Data Protection Act 1998 gives individuals who are the subject of personal data (“data subjects”) a general right of access to personal data that relates to them. These rights are known as “Subject Access Rights” and are detailed in sections 7, 8 and 9 of the Data Protection Act 1998.
How to make a Subject Access Request:
We will contact you and confirm your identity for your security. Northgate is obliged to reply to your request within 40 days. The 40 day period starts from the day on which we have both the fee and have confirmed your identity. If we need additional information from you to deal with your request we will contact you and until this additional information is forthcoming the 40 day period is held in suspension.
What information will Northgate supply?
We will reply in writing in permanent form. You will be told IF any personal data is held about you, and if so you will be given:
- A description of the data
- For what purposes the data is processed
- The recipients / classes of recipients (this will not be individuals names)
You will be told what any unintelligible terms mean including acronyms, where it is known by the data controller you will also be told about the source of the information.
Where applicable we will explain how any automated decisions taken about you have been made. If you specifically requested it, the logic involved in automated decisions will be given.
If you are unhappy with our response or we do not reply in time, we would ask you to contact us in the first instance. You may also complain to the ICO and / or apply to a court.
How to find out more:
We follow the Information commissioners “good practice” guide as described in:http://www.ico.gov.uk/upload/documents/library/data_protection/practical_application/subject_access_-_guide_for_data_subjects.pdf
The government department that deals with Data Protection issues is the Information Commissioners Office (www.ico.gov.uk). A useful leaflet produced by the ICO that provides guidance, example letters and advice on Subject Access can be found at: http://www.ico.gov.uk/upload/documents/library/data_protection/practical_application/subject_access_-_guide_for_data_subjects.pdf
Northgate is the Data Controller that holds and uses information relating to members of the Northgate Accreditation Schemes. If you wish to find out about what (if anything) is held about you as an individual then you need to write to us; this is know as a “Subject Access Request”. Please be as specific as possible about the information you are seeking in your letter. You will also need to include an administration fee of £10.
