DPA - Provisions IIIRights of a Data Subject

• Establish the existence of data

• Access to data

• Correct and/or erase data

Previous slide

Next slide

Back to first slide

View graphic version

Request in writing whether personal data is being kept. If so, must receive description and purpose 21 days.

Examine the data being held. A fee may be charged. Data controller must be sure of identity before giving access as could breach the principles. Dangers of ‘Social Engineering’.

If corrections made, data controller must notify of disclosures of incorrect information. Any identifiable loss could be reclaimed by suing. If modified by intrusion, added complication of perhaps not taking adequate security measures.