Data Subject Access Request (DSAR) Policy

Requests for access to personal data can be made by the subject themselves, irrespective of their age, or through an agent such as a Solicitor or advocate. Requests may also be made by someone who has parental responsibility for a child or person with legal responsibility in cases where the subject is incapable of understanding or exercising their own rights, such as for a young child, or an adult who has been assessed as lacking the capacity to make the request themselves. For more information, see the specified sections of this policy.