Who has a duty under the Act to deal with access requests ?
Answer Responsibility for dealing with a subject access request lies with the “data controller”. A data controller is defined in the Data Protection Act 1998 as a person who (either alone or jointly or in common with other persons) determines the purposes for which and the manner in which any personal data about an individual are, or are to be, processed.