Subject access requests

The UK GDPR gives individuals a right of access to the personal data which organisations hold about them, subject to certain exemptions. Requests for access to personal data are known as subject access requests.

Requests for access to personal data must be in writing. We ask that you complete and return London Metropolitan University's Subject Access Request Form.

This form is designed to gather the information which we need to identify you, communicate with you and locate data about you. Together with the form, you must also send us proof of your identity. We will not begin processing your request until the proof of ID are received. We require proof of ID to ensure that we are releasing data to the correct person. Please supply a certified copy of one of the following:

  • your passport
  • your driving licence

Please send the completed subject access request form and proof of identity by post to the following address:

Information Compliance Manager (& Data Protection Officer)
Legal Services
London Metropolitan University
166-220 Holloway Road
N7 8DB
Telephone: (0)20 7133 4137

If you are dissatisfied with how we have handled your subject access request, you have a right to request an internal review of our response. Reviews will be carried out by someone who was not involved in the original request. Requests for a review should be sent to the above address. You also have the right to complain to the Information Commissioner, although this should not normally be done until we have responded to your request for a review.