I have been asked by a student to supply a copy of their records in accordance with their subject access rights under the Data Protection Act 1998. What should I do?
Refer the request to the University’s Data Protection Co-ordinator. The University will provide the information to the student within 40 days of receiving appropriate identification and other information that will identify the nature of the personal data. Not all requests for personal information need to be subjected to data subject access request procedures, but only those requests that are formally made and cite the data protection legislation as a means of obtaining access to data.