Guide to Data Protection Law 2017 for Data Subjects

You also have a right to a copy of your personal data within 30 days of your request.

All you need to do for this is to submit a request in writing to the organisation in question. You may need to identify yourself to the organization so they are sure it is actually you – note that the time limit is suspended until your identity has been determined.

In addition, you have a right to be provided with the following information:

1. where the personal data came from;
2. the recipients or classes of recipients of the personal data;
3. any countries or territories outside the Islands to which the personal data is transferred;
4. how the security and integrity of your personal data is maintained; and
5. the right to make a complaint to the Ombudsman.

You can use our model form to submit your request to access your personal data.

If you're interested in learning more about this topic, visit our guidance for organisations.