Can a COT3 Acas-conciliated agreement be used to prevent a data subject from exercising their right to make a data subject access request?

Q&As

Read full title

Published by a UU��ֱ�� Employment expert

Published on: 22 November 2018

An individual making a Data Subject access request (DSAR) to a Data Controller is entitled to obtain from the data controller as to whether or not Personal data concerning them is being processed, and if so, access to the personal data and the following information:

•
the purposes of the processing
•
the categories of personal data concerned
•
the recipients or categories of recipient to whom the personal data has been or will be disclosed, in particular recipients in third countries or international organisations
•
where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period
•
the existence of the right to request from the Controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing
•
the right to lodge a complaint with a supervisory authority
•
where the personal

Jurisdiction(s):

United Kingdom

Key definition:

Data subject definition

What does Data subject mean?

Under the GDPR, an identified or identifiable natural person. The concept is key to determining what is personal data (ie information relating to a data subject) and which persons have rights under the GDPR.

UU��ֱ��

Q&As