Skip to content

Data Protection


Chapter 3 of the Data Protection Act 2018 entitles individuals to request and receive a copy of any information held about them by an organisation. Individuals may be:

  • told whether any personal data is being processed;
  • given a description of the personal data, the reasons it is being processed, and whether it will be given to any other organisations or people;
  • given a copy of the information comprising the data; and given details of the source of the data (where this is available).

Requesting Information

If you wish to request details of information held about you by the College please use the Information Requests form.

Following your request, the College will contact you to verify that your credentials match those of the individual for whom you are requesting information.

Information you will receive

Unless the information you have requested is covered by an exemption we will send it to you. Details of exemptions that may apply can be found on the website. If we are unable to release the information to you we will tell you the reason, including any exemptions that apply.


We will send you the information as soon as we can. The Act gives the College one calendar month to respond following receipt of the request, the fee (if required) and the information needed to confirm your identify. This timescale may be extended under certain circumstances. If this happens you will be notified of this and the estimated date of response.

Appropriate Policy Document

Schedule 1, Part 4 of the Data Protection Act 2018 requires the Group to have in place an ‘Appropriate Policy Document’, when we rely on certain conditions for processing Special Category and Criminal Offence data. A copy of this policy can be viewed here

Learn more about data protection





; ;