skip to content

Information Compliance


Under data protection legislation an individual has the right, subject to certain exemptions, to access the personal information that an organisation holds about them. Accessing personal data in this way is known as making a subject access request.  (Subject access requests are different to requests submitted under FOI legislation, which relate to information about the organisation itself.)

The below procedures remain aligned to the legal provisions in section 7 of the Data Protection Act 1998.  These will change with effect from 25 May 2018, from which date the provisions in Article 15 of the General Data Protection Regulation will apply.  This webpage will be updated accordingly.

If you wish to make a subject access request to the University, your request must be:

  • made in writing (this may be in electronic form)
  • accompanied by a fee of £10

Before we can act on your request, we must:

  • be sure of your identity
  • be supplied with information from you in order to locate the information you seek

You are entitled:

  • to be informed whether your personal data are being processed by the University of Cambridge
  • to have the information constituting the personal data communicated to you in a permanent form (usually, this means paper copies)
  • to be given a summary of the sources, recipients and purposes of the processing

You may apply to access your data in writing in any way you choose. A Subject Access Request Form is made available for your convenience. The form sets out where you should send your request as well as the various ways in which you may pay the fee and provide us with proof of your identity.

On receipt of your completed request, payment of the fee, verification of your identity, and sufficient details to enable us to locate the information, the University is obliged to respond within 40 calendar days. The information will be supplied subject to any applicable exemptions. The data will be provided as of the date of receipt of your request.

If you have any reason to believe that the University of Cambridge has not dealt correctly with your request, please contact If you are still not satisfied, you should contact the Information Commissioner's Office.