Home About UHI Governance Policies and regulations Data Protection Access to Personal Data

Access to Personal Data

Under the DPA individuals have a right to know what data is held about them and to access their personal data.

Individuals wishing to access their personal information should submit a Subject Access Request to the University’s Data Protection Officer by completing the electronic form or by writing to:

Data Protection Officer, University of the Highlands and Islands, 12b Ness Walk, Inverness, IV3 5SQ

  1. The request should include details and provide documented evidence of who you are (e.g. driving licence, passport, birth certificate). You should also provide as much detail as possible regarding the information you wish to access (e.g. where and by whom information is believed to be held, specific details of information required etc.).
  2. You are not required to state why you wish to access the information: the details we require are merely those that will aid the efficient location and retrieval of information.
  3. The University adopts a general policy of openness in terms of allowing individuals access to their personal information and wherever possible we aim to waive the £10 administration fee (permitted under the DPA).
  4. Once the Data Protection Officer receives a Subject Access Request, all efforts will be made to fully comply within 40 days. In any event, you will receive all the information that has been located and can be released within 40 days and an explanation for any information that cannot be provided at that time.
  5. In accordance with the DPA, the University does not usually release information held about individuals without their consent. Therefore if information held about you also contains information related to a third party, the University will make every effort to anonymise the information. If this is not possible and the University has been unable to secure the relevant consent, the University may decide not to release the information.

All queries should be directed to the University’s Data Protection Officer in the first instance.