Response record in handling requests for personal information

Under section 7 of the Data Protection Act 1998, all data controllers (in this case Defra) have to respond to a Subject Access Request (SAR), which is a request for an individual’s own personal information, within 40 days of receipt of the request. The Data Access Response Traceability system (DART) below shows Defra's record in handling these requests. DART includes only those SARs notified to Defra's Data Protection Officer.

Year (1 Jan to 31 Dec) Responses sent within 0-20 days Responses sent within 21-30 days Responses sent within 31-40 days Responses sent after the 40-day time limit Total number of SARs (per year)
2002
13
7
29
3
52
2003
4
7
12
2
25
2004
4
7
6
0
17
2005
8
4
5
1
18
2006
4
4
7
0
15
2007
6
1
7
3
17
2008
7
2
3
4
16
2009
3
5
3
2
13
2010
2
2
3
3
10
Total
51
39
75
18
183

* DART does not include figures for the Rural Payments Agency (RPA). For RPA details, please phone the RPA Access to Information Helpline on 0118 953 1466.

** For the purpose of this table, the year in the first column is determined by the date the SAR was received.

*** Comments concerning late SARs:

2002
  • Two further documents were sent after the 40-day deadline for one SAR.
  • For another SAR, papers were sent to data subject 2 days after the 40-day deadline.
2003
  • Further documents were sent 6 days after the 40-day deadline in one case.

Page last modified: 11 Januay 2011
Page published: 9 October 2007