s.9Treatment of requests under section 8
9
Section 9Part 2 — RIGHTS AND RESPONSIBILITIES OF DATA SUBJECTS AND OTHERS

Treatment of requests under section 8

←→ Navigate  ·  Click subsection badges to collapse  ·  Press ? for help

The obligation imposed by section 8(2)(a) shall be complied with by supplying the data subject with a copy of the personal data in the format requested unless —
the supply of such a copy is not possible or would involve disproportionate effort; or
the data subject agrees otherwise.
If any of the personal data referred to in section 8(2)(a) are expressed in terms that are not intelligible without explanation the copy shall be accompanied by an adequate explanation.
If a data controller has previously complied with a request under section 8 by the data subject referred to therein, the data controller is not obliged to comply with a subsequent identical or similar request under that section by the data subject unless the interval between compliance with the previous request and the making of the current request is reasonable.
In determining whether the interval referred to in subsection (3) is reasonable, regard shall be had to the nature of the personal data, the purpose for which the personal data are processed and the frequency with which the personal data are altered.
Section 8(3) shall not be regarded as requiring the provision of information as to the logic of any decision-making where the information constitutes a trade secret.
Personal data and other information supplied under section 8 shall be supplied by reference to the data in question at the time when the request for the personal data is received, except that account may be taken of any amendment or deletion made between that time and the time when the information is supplied, the amendment or deletion being such that would have been made regardless of the receipt of the request.

Cross References