Search site menuicon

Data Protection Act

The Data Protection Act 1998 safeguards all personal data regarding living individuals.

The Data Protection Act contains eight data protection principles which provide guidance as to how information should be handled. The Act states that personal information must be:

  1. fairly and lawfully processed
  2. processed for limited purposes
  3. adequate, relevant and not excessive
  4. accurate and up to date
  5. not kept for longer than is necessary
  6. processed in line with the data subjects rights
  7. secure
  8. transferred to other countries with adequate protection

The Data Protection Act also imposes other responsibilities upon those who collect and process personal information. These are known as data controllers. The data controller in this case is Shepway District Council and there is a requirement that Shepway District Council complies with eight principles listed above.


Subject Access Request

The Data Protection Act gives individuals the right to access personal information held about him or her. This is known as the right of subject access. Under the right of subject access, an individual is entitled only to their own personal data, and not to information relating to other people (unless you are acting on behalf of that person).

If you request information from the Council about yourself it does not fall under the Freedom of Information Act. It must be dealt with as a Subject Access Request under the Data Protection Act.  We will need to verify who you are from the information you give us.

If you wish to make a request under the right of subject access, please complete the form below and send to the information officer with identification and payment as requested on the form.

There is a £10 charge for a Subject Access Request.

Pay online for the Subject Access Request

pdf icon Subject Access Request Form [28kb]

Contact the Information officer