Toggle menu

The Right of Access

Under the General Data Protection Regulation (GDPR), you have a number of rights regarding the way in which we are allowed to process your personal data.

What is the purpose of the right of access under GDPR?

Under the GDPR, individuals have the right to obtain:

  • confirmation that their data is being processed;
  • access to their personal data; and
  • other information about how your data is processed, which will be provided in a privacy notice.

When does the Right of Access apply?

  • The Right of Access only applies to your own personal information, not that of a third party. This means that we won't disclose information about other people in response to your request.
  • We won't disclose information that may prejudice an investigation into alleged crime or fraud.

Requested information must be provided without delay and at the latest within one month of receipt. Mendip District Council may extend the period of compliance by a further two months where requests are complex or numerous. If this is the case, you will be informed within one month of the receipt of the request and an explanation will be given as to why the extension is necessary.

Submitting a request

An Information Rights Request under GDPR may be submitted in either of the following ways:

  • By submitting the online form under Apply for This Service below. 
  • By writing to Information Governance, Mendip District Council, Council Offices, Cannards Grave Road, Shepton Mallet, BA4 5BT

You must include your full name, a return address and a details of the information that you are requesting. Mendip District Council has a duty to verify the identity of requesters, and consequently you may be asked to provide proof of your identity.