FAQsFrequently Asked Questions

Access and Rectification

Subject Access Request - what are they and how can I make one?

A subject access request (SAR) is a request made to a data controller by an individual for a copy of...

See More Information
Access and Rectification

How long does an organisation have to respond to my access request?

Data controllers must respond to such requests within one month of receipt of the request, although this one-month time frame...

See More Information
Access and Rectification

Are there any exceptions to the right of access?

Yes. Article 23 of the General Data Protection Regulation (GDPR) and various provisions under the Data Protection Act 2018 (such...

See More Information
Access and Rectification

Difficulties with my Subject Access Request?

The one-month time frame has elapsed and I have not got my data; what can I do?If, following the expiry...

See More Information
Access and Rectification

Can anyone else make an access request on my behalf?

The right of access under Article 15 of the General Data Protection Regulation (GDPR) applies to a person's own personal...

See More Information
Access and Rectification

What are my rights in relation to accessing account information held in my husband’s/wife's name?

This can be a complex area and depends on the policy of the data controllers in question and any preferences...

See More Information
Access and Rectification

How can I get my credit rating/credit history?

The Central Bank of Ireland, under the Credit Reporting Act 2013 as amended, maintains a central record of repayments made...

See More Information
Access and Rectification

What rights have I to access the script of an exam I undertook?

Section 56 of the Data Protection Act 2018 provides for an Article 15 right of access to results, scripts of...

See More Information
Access and Rectification

Can I access my medical records under data protection law?

The right to access your personal data is a basic right and applies by law regardless of the type of...

See More Information
Access and Rectification

Can I access information contained in a school roll books/parish registers as part of a genealogy project?

If there is potential that the people named in those records are still alive then their consent is required, otherwise...

See More Information
Access and Rectification

Should back-up data be considered as part of an access request?

Back-up data are data kept only for the limited purpose of replacing other data in the event of their being...

See More Information
Access and Rectification

Can I access/amend information in relation to a deceased relative?

Data protection law does not apply to the personal data of deceased persons. However, a particular data controller, for reasons...

See More Information
Access and Rectification

How do I obtain a copy of my personal data from An Garda Síochána (AGS)?

Depending on the data you are seeking access to, it may be the case that the access request falls under...

See More Information
Access and Rectification

What can I do if I find that personal data held about me is incorrect?

Article 16 of the General Data Protection Regulation (GDPR) provides for the rectification of personal data where the personal data...

See More Information
Access and Rectification

What can I do if a data controller has records that defame me or damage my reputation?

The Data Protection Commission (DPC) cannot examine any allegations of defamation (a defamatory statement that tends to injure a person’s...

See More Information