Data Protection

Request personal information

Any person who believes that the University is holding personal information about them can apply for a copy of this by making a Subject Access Request.

The University charges £10 to process Subject Access Requests from people other than current students or staff.

Submit a Subject Access Request

All Subject Access Requests must be made in writing to the Data Protection Officer. To ensure that your request is processed quickly, please:

  • download our Subject Access Request form
  • complete and print the form
  • make a photocopy of suitable personal identification (driving licence or passport).

Send this information to:

Data Protection Officer
Office of University Secretary
4 West 3.3 and 3.5
University of Bath
Claverton Down

If you have all your information in digital format, email it to

Please be as specific as possible when outlining what data you want to see as this can help us locate and gather it.

Requests from third parties

We will only release any personal data to a third party if the Data Subject has given their express consent to us doing so.

Requests from parents

University staff are not allowed to discuss a student’s welfare, progress, or other personal data relating to them with parents, unless the student has given their explicit permission.

Such consent has to be in writing, in either a letter or an email from a recognised student email account.

Requests from sponsors

We are not able to discuss a student’s progress with sponsors, unless the University has received explicit permission from the student to do so.

Such consent has to be in writing, in either a letter or an email from a recognised student email account.

Response to Subject Access Requests

We are required to respond within 40 calendar days of receipt of the request, though we will always try to respond as quickly as possible.

If the data you request is located and can be released, we will normally send paper copies of the information to you in the post.

In some exceptional cases, we may not release the information, or the information in its entirety. This may be because the data is subject to an exemption under the Data Protection Act, or if doing so will release personal data relating to other individuals. If this is the case, you will be provided with a full explanation.

What is a subject access request?