Submitting a Subject Access Request

Any person who believes that the University is holding personal information about them can apply to view it by making a Subject Access Request (SAR).

The best way to submit a SAR to the University of Bath is to write to the Data Protection team. To ensure that your request is processed quickly, please follow the below steps.

1. Download and fill in our Subject Access Request form, being as specific as possible about what data you wish to view as this will speed up the process.
   • We recommend not using AI to construct your request as AI-generated requests frequently include errors on this topic, and will often make them unnecessarily complex, delaying your disclosure. If you have any questions, difficulties or concerns, please email the Data Protection team to schedule a confidential call or view the extensive guidance on the Information Commissioner's Office (ICO) website.
   • Please note: You are under no obligation to explain why you are making your request, but doing so will often help us to find the information you require.
2. Email the completed form to dataprotection@bath.ac.uk or mail it to us at ‘Data Protection Officer, Wessex House 8.17, University of Bath, Claverton Down, Bath, BA2 7AY’.
   • Please note: if you are a University of Bath student or member of staff, please use your University email address as this will help us verify that the request really came from you. If this is not possible, the Data Protection team will contact you about alternative verification methods.

Requests from third parties, parents or sponsors

We will only release personal data on a third party if the Data Subject has given their express written consent to us doing so.

This means that University staff are not allowed to discuss a student's welfare, progress, or other personal data with parents or sponsors, unless the student has given their explicit permission in an email from a recognised student account.

Next steps

We will acknowledge a completed Subject Access Request within 5 working days of receiving it and will return the requested data without undue delay, generally within one calendar month from the moment a request is submitted.

Should there be any issues preventing us from keeping to this timeframe, we will provide you with details and let you know as soon as possible.

The right of access is subject to a number of legal exemptions. In some cases, we may not release the information, or the information in its entirety. This may be because the data is subject to an exemption under the Data Protection Act, or if doing so will release personal data relating to other individuals.

If we find the requested data and can share it, we will normally disclose this to you electronically.

Making a complaint

The University of Bath strives to collect and process personal data with integrity and transparency. However, if you feel that these standards have not been met, please refer to the University of Bath’s complaints procedure.