Data protection

You can make a SAR by writing to the Information Governance Manager.

Our Information Governance Manager is the designated Data Protection Officer and deals with all matters relating to data protection legislation and the Freedom of Information Act 2000, as well as managing and coordinating requests for information received by the University. You can contact the Information Governance Manager at:

Information Governance Manager
Office of the University Secretary and Legal Officer
Harris Building
University of Central Lancashire
Preston
Lancashire
PR1 2HE

Email: DPFOIA
Telephone: +44 (0)1772 892561

Subject Access Request Form

Wherever possible you should use a Subject Access Request Form as this has been designed to help you provide us with the information we need to deal with your SAR quickly. For further information, download our guidance notes.

If you cannot complete the form you can still make a SAR by emailing or writing to us, but we may need to ask you for further information to help us find your personal data.

No, we will handle your request free of charge.

We need two pieces of evidence to prove your identity such as a recent utility or council tax bill, your driving licence or other similar items which include your name and address. This is so we can ensure your personal data remain secure and are only sent to you. You should send us copies of these, rather than original documents.

You should also provide us with as much detail as you can about the information you want to access so we can locate it quickly. If we need to contact you for further information to help us find the personal data you requested you may have to wait longer for a response.

We will normally respond in the same method as the request was received, i.e. we will post our response to you if it was received by mail, or will email it to you if you sent your request by email. If you wish to receive the information in a different format, for example you have made the request by email but wish to collect the information in hard copy form in person, or to have the information posted to you, please also include these details in your request.

Once we have received your SAR in writing, proof of your identity and any information we reasonably require to locate your personal data, we have one calendar month in which to provide you with your information.

Once we have located your personal data we will either post copies to you by Recorded Delivery or email the information to you in an encrypted attachment (this means you will have to use a password to access the information we send you and is for security purposes – only those with the password will be able to open the information).

We will normally respond in the same method as the request was received, i.e. we will post our response to you if it was received by mail, or will email it to you if you sent your request by email. If you wish to receive the information in a different format, for example you have made the request by email but wish to collect the information in hard copy form in person, or to have the information posted to you, please also include these details in your request.

Yes. You can ask anyone to act on your behalf such as a friend, relative, solicitor or employee of a consumer organisation such as a Citizens Advice Bureau. Before we will discuss or provide your personal data to anyone acting on your behalf you must confirm to us in writing that they have your authority to do so.

Under Data Protection legislation we must provide you with all the personal data you are entitled to. This usually means we will provide you with everything we hold about you; however, in some cases certain information may be exempt. This means we do not have to provide it to you.

There are a number of reasons why information may be exempt; however as an example, it may be exempt if providing it to you would compromise the prevention or detection of crime or the prosecution of offenders. In certain cases we may also withhold some information relating to education, health and social work. We also do not have to provide any information that is not recorded or create new records for you, or release information about other individuals.

You should contact the Information Governance Manager directly by post or email using the above details; we will then arrange for an internal review of the response to be carried out. If you are still unsatisfied, you can also complain to the Information Commissioner.

You can complain to the Information Commissioner about the way UCLan or any other organisation is processing your personal data. The Information Commissioner is an independent regulator who provides advice and guidance on, and enforces, data protection legislation in the UK. The Information Commissioner will not normally investigate complaints if you have not tried to resolve the matter with the organisation yourself first.

You can contact the Information Commissioner at:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Helpline: +44 (0)1625 545745 or +44 (0)303 1231113
Fax: +44 (0)1625 524510
Web: The Information Commissioner's Office