F129A

1

Where regulations 28 and 29 apply, communications providers must establish and maintain internal procedures for responding to requests for access to users’ personal data.

2

Communications providers shall on demand provide the Information Commissioner with information about—

a

those procedures;

b

the number of requests received;

c

the legal justification for the request; and

d

the communications provider’s response.