Subject Access Requests
Individuals wishing to access their personal data held by The Hayesbrook School under the Data Protection Act can send a completed Subject Access Request (SAR) form to the Data Protection Officer (DPO).
Data Protection Officer
The Hayesbrook School
Information required and procedure for responding to subject access requests
The personal data requested should be clearly identified. It may be necessary to confirm the identity of the data subject and/or the person making the request. The Hayesbrook School will respond to requests within 30 calendar days of receipt of the completed form (provided sufficient information has been given to the school to enable the request to be processed).
General guidance when requesting subject access to emails
Data subjects are entitled to have access to their personal data held in the form of emails under the Act. However, data subjects must supply enough information to enable The Hayesbrook School to locate the relevant emails. As a minimum, the following information must be provided to the DPO when completing the form:
- The fact that the data may be held in the form of emails;
- The names of the authors or recipients of the messages;
- The dates or ranges of dates upon which the messages have been sent;
- Any other information that might assist the school in locating the data.
Please note that failure to provide information reasonably required to narrow down the search could result in the school being unable to comply with a subject access request.
The Hayesbrook School will comply with the Information Commissioner’s guidelines for SARs.
Subject Access Request Form