Guernsey Data Protection Series – Data Subject Access Requests

This briefing is a part of a Walkers series on the Data Protection (Bailiwick of Guernsey) Law, 2017 (the "DPL"), and provides an overview of section 15 of the DPL (the Right to Access) and describes some key points which organisations may want to consider when receiving and responding to a Data Subject Access Request ("DSAR").

A related briefing on the object of the DPL, some of the key concepts used in the DPL, what the data principles are and the rights of data subjects is available here.

The right to access

An individual has a right to be given the following information – (a) confirmation as to whether or not personal data relating to the individual is being processed in the context of a controller, and (b) if personal data relating to the individual is being processed in the context of a controller – (i) the information specified in Schedule 3 to the DPL, (ii) one copy of the personal data, and (iii) further copies of the personal data. On request by an