Skip to main content

Subject access request

General Data Protection Regulation (GDPR)

The General Data Protection Regulation came into force on 25 May 2018. Under GDPR you have the right to obtain:

  • access to your personal data
  • confirmation that your data is being processed
  • details of why we are processing your data and, where necessary, who it will be shared with (in the form of a privacy notice)

GDPR makes it clear that by letting people access their personal data they are aware of and can verify the lawfulness of the processing.

Cost of subject access requests

From 25 May 2018 subject access requests will be free. In some cases we can charge if a request is excessive or repetitive.

Once we get a subject access request we will acknowledge it and respond within one calendar month.

If a request is complicated or numerous, response times can be extended up to a further two months. We will let you know within one month of receiving the request and explain why.

You will need to make your request in writing. The easiest way is by using the general enquiries online form. Please fill in as much detail as you can as this will help us to process your application.

Write to:

Data Protection
Somerset West and Taunton Council
PO Box 866

Laws and regulation


If you are not satisfied with the outcome of your request you can ask for an internal review to be carried out by our Data Protection Officer. If you remain dissatisfied following this review you can appeal to the Information Commissioner who is responsible for enforcing the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018.