Data Protection and Subject Access Requests

Data Protection

The Data Protection Act 1998 governs the way in which personal data is collected, stored, processed and distributed.

We need to collect personal information about people we deal with in order to carry out Council business and provide services. Such people include customers, employees, suppliers and other business contacts.

We may be required to collect and use certain types of personal information to comply with the requirements of the law.  No matter how data it is collected, recorded and used (i.e. on a computer or on paper) this personal information must be dealt with properly to ensure compliance with the Data Protection Act 1998.

We support fully and comply with the eight principles of the Data Protection Act 1998, of which more information can be found on the Information Commissioner's Office website.

Subject Access Requests

Any request from an individual for information held about them by the council is called a Subject Access Request and should be sent to:

To process a Subject Access Request the following is required.

• a fee of £10 (Cheques made payable to Oxford City Council)
• proof of identity such as copy or production of:

          - driving licence
          - passport
          - recent utility bill.

If a third party is making the request, a signed letter of consent from the data subject (person who's data is required) should also be enclosed.

A subject access request application form is available below but any requests in writing will be accepted providing the above criterion is met:

Subject Access Request Form (194kB DOC)