Make a subject access request (SAR)

The General Data Protection Regulation (GDPR) gives you the right of access to personal data held about you, whether in digital or certain paper records. This includes facts and expressed opinions about you. See Data Protection and your rights.

Whilst you can submit a subject access request however you wish, we recommend you use our online form.

Make a subject access request online

However you submit a request, you will need to provide identity documents so we can be sure we are giving the data to the right person or their chosen representative.

If making your request by email, post or online you will need to provide two forms of ID, including one photo ID and a recent utility bill with your full name and address.

Accepted photo IDs include passport identification pages or a driving licence.

If requesting on behalf of someone else, include their signed consent and proof of their identity.

Send postal requests to dataprotection@oxford.gov.uk or:

Data Protection
Oxford City Council
Town Hall
St Aldate's
Oxford, OX1 1BX
United Kingdom

We will acknowledge your request and aim to respond within 30 calendar days. If we need more information or clarification, the 30-day period starts once we receive this additional information.

The data provided may be in photocopies, printouts, or a combination. If we hold no data about you, we will inform you.

Exemptions to data disclosure

Certain exemptions may apply to the disclosure of information, including but not limited to:

• regulatory and enforcement functions
• crime prevention or detection, and apprehending or prosecuting offenders
• third party data
• legal disclosure

Complaints and further action

If you're unhappy with our handling of your request, contact our Data Protection Team at dataprotection@oxford.gov.uk for an informal resolution. For formal complaints, follow our complaints procedure.

For unresolved issues, you can contact the Information Commissioner's Office (ICO).