• You are here:
• Home
• Freedom of information

Data Protection

What is the Data Protection Act (DPA)?

The DPA gives a statutory right to request access to personal data to the person who is the subject of that data. Under the DPA, DIUS is legally obliged to protect personal information, to release it to the individual concerned if requested, and to amend or delete the information as appropriate. However, there are limited exemptions to releasing information (for example national security).

How do I access information under the Data Protection Act?

If you would like to request information under the DPA please write to the Public Communications Unit.

You can contact the Public Communications Unit by telephone, fax, email or letter.

Email: info@dius.gsi.gov.uk

For all enquiries call: 0807 001 0336

Please note that in some circumstances you may be referred to an alternative number for advice.

Please send all written correspondence to the postal address listed below:

Postal Address:

Please be specific about the information you want, as this will help us to find it for you. If possible please include a contact number so that we can contact you if we need to clarify your request.

Please remember that DPA requests must be in writing, but this includes emails as well as letters and faxes.

It would be helpful if you could detail where you believe personal data may be held about you in DIUS (for example, any dealings you may have had with a particular office within the Department or an agency or non-departmental public body of the Department). This will allow us to conduct a reasonable search for your information.

You must also include two forms of identification with your written request. This is to ensure that personal data is only released to the person to whom the data relates.

The statutory period for responding to a DPA request is 40 calendar days. This begins from either the date we receive proof of identification from you or the date on which we receive any further information that we may request in order to locate your personal data. We will confirm to you the operative date for calculating the 40 day period at the outset of processing your request.

Who is covered by the Data Protection Act?

All public authorities and private companies are bound by the Data Protection Act. This differs from the Freedom of Information Act, where only public authorities are covered.

You can find more information about the Data Protection Act at ICO Website.