The ICO exists to empower you through information.

What is the right of access in Part 3 of the DPA 2018?

How do we recognise a Part 3 subject access request (SAR)?

What should we consider when responding to a Part 3 request?

How should we supply Part 3 information to the requester?

Can we restrict the right of access under Part 3?

What should we consider when acting as joint controllers?

What should we do if the Part 3 request involves information about other people?

What do we need to consider if personal information is processed by a court for law enforcement purposes?

Can the right of access be enforced under Part 3?