What are Subject Access Requests?

Under the Data Protection Act, the data subject has the right to find out what information is kept about them. The data controller (organisation) must respond within 40 calendar days. These requests are called Subject Access Requests. In order for the organisation to respond to it, the request must: