Data Protection - Subject Access Requests

What is a Subject Access request?

 The Data Protection Act 1998 gives any individual (data subject) the right to access all the information held about them by English Heritage.  This is a Subject Access Request.  If, for whatever reason, the data subject is unable to submit the request themselves a third party can place a request on their behalf. 

How do I make a Subject Access Request?

In order to make a Subject Access Request you are required to complete our Subject Access Request form. You will also need to supply a form of identification.  This may be:

• a current driver’s license
• a current passport
• a birth certificate

We require proof of identification before we can process your request.  This is to protect the identity of the data subject and ensure that the Data Protection principles included in the Freedom of Information Act 2000 are not breached.

If you are making a request on behalf of someone else please include proof of identification for yourself and the data subject.  In addition we require a letter from the data subject authorising the request on their behalf. 

The completed form along with proof of identity should be sent to:

Access to Information Manager
English Heritage
National Monument Record Centre
Kemble Drive
SWINDON
SN2 2GZ

When can I expect to receive a response?

The Act states that responses to Subject Access requests should be sent out no later than 40 calendar days after receipt of the request.  If we have to write to you requesting further information the ‘clock’ stops until all the necessary documentation has been provided.