Make a data protection request.
Under the Data Protection Act and the UK GDPR you have the right to ask for a copy of the information we hold about you. You are only entitled to make a request for personal information on behalf of another living adult if you have authorisation to do this. Parents or guardians are allowed to make a request for personal information on behalf of their children, although if the children are aged 13 or over then they must give their permission for this.
We need some details from you to help us to find the information that you are interested in and to deal with your request as efficiently as possible. We also need proof of identity, as we need to be satisfied that you are entitled to the information.
- contact the Trust asking to see your records; you may do this via our email address email@example.com
- establish your identity by providing suitable ID
- help us to find the information by specifying what data you would like to see
If you wish to see your adoption file please request this in your email.
- acknowledge your request
- inform you if we have any personal data about you and if we have
- reply within one calendar month
Bradford Children and Families Trust does not currently charge any fee for subject access.
Acceptable forms of identification
List A (name and date of birth)
- Full valid driving licence
- Birth certificate or certificate of registry of birth or adoption certificate
- Valid current passport
List B (name and current address)
- Gas, electric, water or telephone bill in the Data Subject’s name dated within the last 3 months
- Bank, building society or credit card statement in the Data Subject’s name dated within the last 3 months
- Letter to the Data Subject from a solicitor, social worker or probation officer dated within the last 3 months
Rights for individuals under the UK GDPR
From 25 May 2018 the UK General Data Protection Regulation came into effect. The Regulation will give increased rights for individuals. The rights and how to exercise these are detailed below.
The right to be informed
The way that your personal data is collected, handled and processed and the purpose for its processing should be detailed in the Privacy Notice associated with the method of the collection, whether this is via electronic means or paper. The Privacy Notice is a full explanation for you of exactly why we need your personal data, where it will be stored, who it will be shared with, the purpose of collecting it, the Data Protection Officer contact, your rights to object and how long the data will be kept for.
The right of access
This is your right to request sight of the information that we as a Trust hold about you. It is called a Subject Access Request (SAR) and is processed under section 94 Data Protection Act 2018 and will be dealt with by the Data Protection Officer free of charge.
The right to rectification
This means that you have the right to request that we correct any incorrect or inaccurate information held on our systems, such as wrong addresses or incorrect spellings. Corrections must be carried out within a month of us being informed, including asking third parties to also amend their systems accordingly. Please contact the name provided on the appropriate Privacy Notice or email firstname.lastname@example.org.
The right to be forgotten
This means that as long as the purpose for processing the data is not a statutory one, or in other words doesn’t have a legal basis, then you can request that your information is withdrawn by withdrawing your consent for processing. As long as the data is not required for a legal or safeguarding purpose, you have the right for your entry to be deleted from our systems.
The right to restrict processing
This right applies where an individual may feel that we are acting upon incorrect or inaccurate information. They will have the right under the new law to request that we restrict processing while we look into the situation. This must be done and a decision made within a month. During this time no action or further processing can take place. Once a written decision is made and any inaccuracies documented and amended the processing can be re-commenced.
The right to data portability
The right to data portability is new. It only applies to personal data an individual has provided to a controller and where the processing is based on the individual’s consent or for the performance of a contract; and when processing is carried out by automated means.
The right to object
This right is the same right that exists currently in that you can complain to the Trust Data Protection Officer (DPO) if you feel that your data rights have been incorrectly handled or breached. Complaints about data protection should be sent to the Trust Data Protection Officer at email@example.com.
Complaints about the service that you have received should be sent to our Customer Care team. For more information, please visit our complaints web page.
The right not to be subject to automated decision-making including profiling
If the Trust intends to use your data for profiling purposes or for automatic decision making you must provide explicit consent or us to process your data in this way. You can withdraw your consent at any time. In addition, you can request that a human make the decision and that the ‘automated’ part is not utilised.
You have the right to request that Bradford Children and Families Trust stops processing your personal data in relation to any service (other than statutory services) where that processing is likely to cause substantial and unwarranted damage or distress. However, this may cause delays or prevent us delivering a service to you. Where possible we will seek to comply with your request, however there may be circumstances where this is not possible – for example if we are required to hold or process information to comply with a legal requirement.
We try to ensure that any information we hold about you is correct. There may be situations where you find the information we hold is no longer accurate and you have the right to have this corrected.