The right of access (known as subject access) is a fundamental right of the UK General Data Protection Regulation (UK GDPR). It allows individuals to find out what personal data is held about them and to obtain a copy of that data. Following on from our initial GDPR guidance on this right (published in April 2018), the ICO published more detailed guidance which explains in greater detail the rights that individuals have to access their personal data and the obligations on controllers. You can read our detailed guidance here.
We put the draft guidance out for consultation and the insights from the consultation responses helped us to shape and refine our guidance further. We have now published the responses to our consultation and our summary of these responses. Individual responses have not been published, only those that explicitly named the organisation.
For more information about what we do with personal data please see our privacy notice.
- NAHT
- Nando's
- National Library of Scotland
- Nestle UK & Ireland
- Network Homes
- Networx Recruitment
- Newark and Sherwood Homes
- Newry Mourne and Down District Council
- News UK
- NHA Norwich Clinical Commissioning Group
- NHS Business Services Authority
- NHS Digital
- NHS England
- NHS Scotland
- NHS South Central and West Commissioning Support Unit
- NHS Trust
- NHSX
- North West DP Group 1 of 2
- North West DP Group 2 of 2
- North Yorkshire Information Governance Practitioner's Group
- North Yorkshire Police
- Northern Ireland Housing Executive
- Northridge Finance
- Norwich Castle Partnership GP
- Notting Hill Genesis Housing Group
- NPCC DP FOIA Portfolio subject rights group
- NPTC
- Nuffield Health
- Oakley Health Group 1 of 4
- Oakley Health Group 2 of 4
- Oakley Health Group 3 of 4
- Oakley Health Group 4 of 4
- Oakley Health Group case commentary submitted with redaction
- Oakley Health Group together with larger group of GPs
- Ocucon
- Ofgem
- Onaware Consultation
- Open Rights Group
- Optindigo
- Optindigo Full answer to question 1
- Paragon Banking Group
- Peninsula Group Ltd
- Pension Scams Industry Group
- PIMFA
- Pinsent Masons LLP
- Plusnet
- Plymouth City Council
- The Purkiss Partnership
- Randstad UK Holding Ltd
- Revolut Ltd
- Ringway Jacobs
- Rochdale Borough Council
- Rollits
- Royal Holloway and Bedford New College
- Saga Group
- The Salvation Army
- Schneider-Electric
- Scottish Government
- Scottish Higher Education Information Practitioner's Group
- Scottish Information Commissioner
- Severn Trent Plc
- Social Work Scotland
- Society of Computers and Laws Privacy Committee
- Solihull Council
- South Somerset District Council
- Southend Borough Council
- Southwark Council
- Staffordshire County Council
- St Crispin's School
- St Thomas Medical Group
- Stone King LLP
- Sussex MSK Partnership Central administered by Care Unbound Ltd
- Swansea University