The UK’s independent authority set up to uphold information rights in the public interest, promoting openness by public bodies and data privacy for individuals.

The right of access (known as subject access) is a fundamental right of the UK General Data Protection Regulation (UK GDPR). It allows individuals to find out what personal data is held about them and to obtain a copy of that data. Following on from our initial GDPR guidance on this right (published in April 2018), the ICO published more detailed guidance which explains in greater detail the rights that individuals have to access their personal data and the obligations on controllers. You can read our detailed guidance here.

We put the draft guidance out for consultation and the insights from the consultation responses helped us to shape and refine our guidance further. We have now published the responses to our consultation and our summary of these responses. Individual responses have not been published, only those that explicitly named the organisation.

For more information about what we do with personal data please see our privacy notice.