Guide to Making a Personal Access Data Request · duty of care towards the personal data within its...

Guide to Making a Personal Access Data Request

Introduction

FailteIrelandisawareofitsobligationsasadatacontroller,withprimaryresponsibilityfor,andadutyofcaretowardsthepersonaldatawithinitscontrol.FáilteIrelandisadatacontrollerwithreferencetothepersonaldatawhichitmanages,processesandstores.DatasubjectswhosepersonaldataisheldFailteIrelandareentitledtoaskwhetherthedatacontrollerisprocessinganypersonaldataaboutthatindividualand,ifso,tobegiven:

1)Adescriptionofthepersonaldata;

2)Thepurposesforwhichtheyarebeingprocessed;

3)Informationonanyorganisationtowhomthatpersonaldataisbeing,ormightbedisclosed.

Thedatasubjectmustalsobetoldaboutthesourcesfromwhichthedatacontrollerderivedtheinformationsolongasthosesourcesareavailabletothecontroller,andforacopyoftheinformationheld,inresponsetoavalidrequesttothateffect.

SubjectAccessRequestProcedure

ToseeacopyofyourowndataheldbyFailteIrelandyouwillneedtosubmitawrittenrequest,emailorusetheonlineform.ThensendittotheFailteIrelandDataProtectionat

dataprotection@failteireland.ie or

Inwritingto:DataProtectionOfficer,FáilteIreland,Unit2NessanHouse,RiverviewBusinessPark,BessboroRoad,Blackrock,CorkT12R8HE,Ireland

enclosingproofofidentity,suchasstaffIDcard,orcopyofdrivinglicenceorpassportYouareencouragedtocompletetheSubjectAccessRequestForm(online)toassistFáilteIrelandinaccuratelyidentifyingthelocation(s)ofthepersonaldata.However,anyrequestinwritingisacceptable.FáilteIrelandmustrespondtoyouwithinonemonthtoyourrequestonceithasreceivedalltherelevantinformation.

Bymakingarequestviathisformemailoronlineyouwillreceivedtheinformationbackviaemail.

Bymakingarequestviapostyouwillreceivetheinformationviapost.

Charges

No.normallythereisnofeeforthisrequest.

Pleasenote:-Wheretherequestisregardedasmanifestlyunfoundedorexcessiveareasonablechargewillbemadetakingintoaccountoftheadministrationcostsofprovidingtheinformation.

Listoffeesformanifestlyunfoundedorexcessiverequests

• SearchandRetrieval–€20perhour(forrequeststhatexceedthe€100minimumintermsofsearch,retrievalandcopying),subjecttotheceilingsmentionedabove.

• €0.04persheetforaphotocopyincludingduplicatecopies

Howtomaketheprocessfaster?

• Youshouldincludeanydetailsthatwillhelptheorganisationlocatetheirpersonaldata,e.g.staffIDnumbers,thedate-rangeofthedata.

• As much information as possible about the personal data being sought. • You may be asked to provide appropriate identification • Details of the format in which you wish to receive any records released

(e.g. photocopies etc)

CanIgethelpinmakingarequest?

Yes.IfyouneedhelppreparingyourPersonalDataAccessRequest,thestaffintheGDPRUnitwillbehappytoassistyou.Additionalassistancecanbegivenbylookingat“FrequentlyAskedQuestionsPersonalDatarequest”(Link)Youcancontactusat1890697000ordata.protection@failteireland.ieorDataProtectionOfficer,FáilteIreland,Unit2NessanHouse,RiverviewBusinessPark,BessboroRoad,Blackrock,CorkT12R8HE,Irelan

Other sources of information

The Data Protection Commission is responsible the Governance of the General Data Protection

Regulations (GDPR). Information about this legislation and Subject Access Request is available on

https://www.dataprotection.ie/docs/Accessing-Your-Personal-Information/r/14.htm andhttps://www.dataprotection.ie/docs/Home/4.htm .

Further information can be found on http://gdprandyou.ie/