Data protection

New and updated

• Type:

  Letters and forms

  Letter asking for more information on request for erasure of personal data

  A model letter to respond to an individual who has requested the erasure of data about them, where further information is required to locate the requested information or to identify the person making the request. The letter complies with the General Data Protection Regulation (GDPR).

• Type:

  Letters and forms

  Letter extending time to respond to request for erasure of personal data

  A model letter to extend the time limit for responding to an individual's request for the erasure of data about them. The letter complies with the General Data Protection Regulation (GDPR).

• Type:

  Letters and forms

  Form for individual to provide explicit consent to processing of personal data

  A model form to seek consent from an individual to process their personal data for a specific purpose, where no other legal basis for the processing applies. The form complies with the General Data Protection Regulation (GDPR).

• Type:

  Letters and forms

  Form for individual to make subject access request

  Updated to take account of verbal subject access requests, which ICO guidance states are valid.

• Type:

  Letters and forms

  Letter responding to subject access request providing requested information

  Updated to take account of verbal subject access requests, which ICO guidance states are valid.

• Type:

  Letters and forms

  Letter responding to subject access request asking for more information

  Updated to take account of verbal subject access requests, which ICO guidance states are valid.

• Type:

  Letters and forms

  Letter extending time to respond to subject access request

  Updated to take account of verbal subject access requests, which ICO guidance states are valid.

• Type:

  FAQs

  What rights of access do employees have to job references?

• Type:

  FAQs

  Where an individual's employment offer is withdrawn due to an unsatisfactory reference do they have any right to see the reference?

• Type:

  FAQs

  Where an employer has been asked by the police to provide information on an employee, will data protection laws prevent it from complying with the request?