Making a Subject Access Request

A subject access request, is the right individuals have to access and receive a copy of their personal data, which is held by organisations. It basically a way for you to obtain copies of your records held the Council.

You can find out how the Council processes your data and information about you from the Council’s Privacy Notices.

When making a Subject Access Request (SAR), you can ask us to send you a copy of the data we hold about you

Waltham Forest Council operates in accordance with the Data Protection Act 2018 (DPA) and the UK GDPR. This means individuals can request personal records that are held about them through a Subject Access Request (SAR). However, some information contained in records may be exempt, but we would advise you where this is the case.

Data held by other organisations

When you are making a SAR request, the holder of that data may not be the Council. There are other government agencies such as the Police, HMRC, Department of Work and Pensions and other Local Authorities that will be responsible for holding data.

The Information Commissioners Office has a register of these data controllers. You can search the register to see what type of information is held about you. The reference number to enter is:

Z7599838

Information Commissioner's Office - Register of data protection fee payers (ico.org.uk)

What is personal information?

Examples of personal records or information can be:

• Your Council tax record
• Your Tenancy file
• Service requests you have made to the Council 

Our duty is to make sure that we send you the information you have requested, no later than one calendar month. If we need more details about your request, or there is a valid reason that we cannot send you the information, we will contact you.

You can contact us by writing to us at the address listed below.

When you submit your request, we will need to see evidence before we can release any information to you. You will need to confirm your identity by:

• proof of your identity, like your driving licence or passport

If you’re asking for your child or someone; else, you will also be asked to include:

• proof of their identity
• proof you’re legally entitled to act on their behalf/ request information about them.

Parents do not have the automatic right to request data about their child. That right belongs to their child.

However, if they have parental rights and responsibilities, they may be able to act on behalf of their child. In England, parents must have consent once the child has reached the age of 12.

If a child is able to understand the SARS process, they should be asked for their consent before any requests are submitted.

If you are dissatisfied with the response you have received, you can make a complaint to the Council. Or if you prefer to write to us, please use the address listed below.

If after receiving a response to your request, you are still unhappy, you have the right to complain to the Information Commissioner.​​

The Information Commissioner has detailed information on their website about your Right to Access Information and your Right to be informed about what happens with your data.