Subject Access Requests

Here is the process detailing how we handle your request:

Step 1: We Receive Your Subject Access Request

You should submit your request using the Subject Access Request (SAR) Pro Forma. The more information you provide on this form, the easier it will be for us to locate your information. Once you have completed your form, please email it to dp@lboro.ac.uk.

Step 2: We Collate The Information

Once the information you have requested has been confirmed the Data Protection Team will begin the process of contacting colleagues across the University and collating the information.

Step 3: We Review Your Information

Before we release your information to you, it is very important that we review it to ensure that it does not contain the personal data of other individuals (third parties). All personal information of other individuals will be redacted (removed or blocked out), as it is not relevant to you. If we have had to redact information, then this will be drawn to your attention in the covering letter.

If your request contains a substantial amount of information (from various sources), then reviewing it can be time consuming. We review information as we receive it and aim to release it to you within one calendar month of the request being received.

Step 4: We Release Your Information

Once the information has been reviewed we will contact you and confirm the details for releasing it to you. If you have requested that we provide your information electronically, this will be encrypted with a password. If you have requested that we send your information to you by post, then we will do so using Royal Mail ‘Signed For’ delivery.

If you have any queries regarding your requested information, then you will be able to raise these with us via dp@lboro.ac.uk.

Step 5: We Delete Your Information

It is important that we do not retain your personal data for any longer than is necessary. Therefore, all of the information collated as part of your SAR will be deleted either 12 months after the release date, or 12 months after the last query you made regarding the request has been resolved; whichever is the later. Original copies of the requested information will remain where they were located and will be retained as per the University Data Retention Schedule.  

All queries should be directed to the University’s Data Protection Officer in the first instance.

Data Protection Officer
Academic Registry
探花精选
Loughborough LE11 3TU

Telephone number
01509 228906
Email address
Send email

Data Protection Complaints Procedure

The University takes its obligations under the UK GDPR (2018), the Data Protection Act (2018), and the Privacy and Electronic Communications Regulations (PECR) very seriously. There is a procedure for handling complaints from individuals or by third parties about the University's use and processing of personal data.