- Y Diweddaraf sydd Ar Gael (Diwygiedig)
- Pwynt Penodol mewn Amser (01/04/2013)
- Gwreiddiol (Fel y'i Deddfwyd)
Version Superseded: 03/12/2014
Point in time view as at 01/04/2013. This version of this provision has been superseded.
You are viewing this legislation item as it stood at a particular point in time. A later version of this or provision, including subsequent changes and effects, supersedes this version.
Note the term provision is used to describe a definable element in a piece of legislation that has legislative effect – such as a Part, Chapter or section.
Data Protection Act 1998, Section 7 is up to date with all changes known to be in force on or before 24 August 2024. There are changes that may be brought into force at a future date. Changes that have been made appear in the content and are referenced with annotations.
Changes and effects yet to be applied by the editorial team are only applicable when viewing the latest version or prospective version of legislation. They are therefore not accessible when viewing legislation as at a specific point in time. To view the ‘Changes to Legislation’ information for this provision return to the latest version view using the options provided in the ‘What Version’ box above.
(1)Subject to the following provisions of this section and to [F1sections 8, 9 and 9A], an individual is entitled—
(a)to be informed by any data controller whether personal data of which that individual is the data subject are being processed by or on behalf of that data controller,
(b)if that is the case, to be given by the data controller a description of—
(i)the personal data of which that individual is the data subject,
(ii)the purposes for which they are being or are to be processed, and
(iii)the recipients or classes of recipients to whom they are or may be disclosed,
(c)to have communicated to him in an intelligible form—
(i)the information constituting any personal data of which that individual is the data subject, and
(ii)any information available to the data controller as to the source of those data, and
(d)where the processing by automatic means of personal data of which that individual is the data subject for the purpose of evaluating matters relating to him such as, for example, his performance at work, his creditworthiness, his reliability or his conduct, has constituted or is likely to constitute the sole basis for any decision significantly affecting him, to be informed by the data controller of the logic involved in that decision-taking.
(2)A data controller is not obliged to supply any information under subsection (1) unless he has received—
(a)a request in writing, and
(b)except in prescribed cases, such fee (not exceeding the prescribed maximum) as he may require.
[F2(3)Where a data controller—
(a)reasonably requires further information in order to satisfy himself as to the identity of the person making a request under this section and to locate the information which that person seeks, and
(b)has informed him of that requirement,
the data controller is not obliged to comply with the request unless he is supplied with that further information.]
(4)Where a data controller cannot comply with the request without disclosing information relating to another individual who can be identified from that information, he is not obliged to comply with the request unless—
(a)the other individual has consented to the disclosure of the information to the person making the request, or
(b)it is reasonable in all the circumstances to comply with the request without the consent of the other individual.
(5)In subsection (4) the reference to information relating to another individual includes a reference to information identifying that individual as the source of the information sought by the request; and that subsection is not to be construed as excusing a data controller from communicating so much of the information sought by the request as can be communicated without disclosing the identity of the other individual concerned, whether by the omission of names or other identifying particulars or otherwise.
(6)In determining for the purposes of subsection (4)(b) whether it is reasonable in all the circumstances to comply with the request without the consent of the other individual concerned, regard shall be had, in particular, to—
(a)any duty of confidentiality owed to the other individual,
(b)any steps taken by the data controller with a view to seeking the consent of the other individual,
(c)whether the other individual is capable of giving consent, and
(d)any express refusal of consent by the other individual.
(7)An individual making a request under this section may, in such cases as may be prescribed, specify that his request is limited to personal data of any prescribed description.
(8)Subject to subsection (4), a data controller shall comply with a request under this section promptly and in any event before the end of the prescribed period beginning with the relevant day.
(9)If a court is satisfied on the application of any person who has made a request under the foregoing provisions of this section that the data controller in question has failed to comply with the request in contravention of those provisions, the court may order him to comply with the request.
(10)In this section—
“prescribed” means prescribed by the [F3 Secretary of State] by regulations;
“the prescribed maximum” means such amount as may be prescribed;
“the prescribed period” means forty days or such other period as may be prescribed;
“the relevant day”, in relation to a request under this section, means the day on which the data controller receives the request or, if later, the first day on which the data controller has both the required fee and the information referred to in subsection (3).
(11)Different amounts or periods may be prescribed under this section in relation to different cases.
Textual Amendments
F1Words in s. 7(1) substituted (30.11.2000 for certain purposes and otherwise 1.1.2005) by 2000 c. 36, ss. 69(1), 87(1)(3) (with ss. 7(1)(7), 56, 78); S.I. 2004/1909, art. 2; S.I. 2004/3122, art. 2
F2S. 7(3) substituted (14.5.2001) by 2000 c. 36, s. 73, Sch. 6 para. 1 (with ss. 56, 78); S.I. 2001/1637, art. 2(d)
F3Words in s. 7 substituted (19.8.2003) by The Secretary of State for Constitutional Affairs Order 2003 (S.I. 2003/1887), art. 9, Sch. 2 para. 9(1)(a)
Modifications etc. (not altering text)
C1S. 7 excluded (1.3.2000) by S.I. 2000/414, art. 5(1)
S. 7 modified (1.3.2000) by S.I. 2000/414, art. 6
S. 7 modified (1.3.2000) by S.I. 2000/191, reg. 4(1)
S. 7 excluded (1.3.2000) by S.I. 2000/413, art. 5(1)
S. 7 modified (1.3.2000) by S.I. 2000/413, arts. 6(1), 7(3)
S. 7 modified (1.3.2000) by S.I. 2000/415, art. 6
C2S. 7 excluded (1.3.2000) by The Data Protection (Miscellaneous Subject Access Exemptions) Order 2000 (S.I. 2000/419), art. 2 Sch. (as amended (1.10.2009) by S.I. 2009/1892, art. 3, Sch. 3 para. 1)
C3S. 7 modified (1.3.2000) by virtue of The Data Protection (Subject Access Modification) (Education) Order 2000 (S.I. 2000/414), art. 7(1)(a)(2)
C4S. 7(12) modified (1.3.2000) by virtue of The Data Protection (Subject Access Modification) (Social Work) Order 2000 (S.I. 2000/415), art. 7(2 (as amended (7.3.2005) by The Data Protection (Subject Access Modification) (Social Work) (Amendment) Order 2005 (S.I. 2005/467), art. 4; (1.4.2011) by The Data Protection (Subject Access Modification) (Social Work) (Amendment) Order 2011 (S.I. 2011/1034), art. 4 and (E.W.) (6.4.2011) by The Family Procedure (Modification of Enactments) Order 2011(S.I. 2011/1045), {art. 23})
C5S. 7(1) extended (1.3.2000) by S.I. 2000/191, reg. 2(2)
C6S. 7(1)(a)(b)(c) extended (1.3.2000) by S.I. 2000/191, reg. 2(1)
C7S. 7(1)(b)-(d) excluded (1.3.2000) by S.I. 2000/415, art. 5(1)
C8S. 7(4)(9) modified (1.3.2000) by S.I. 2000/413, art. 8(a)(b)
S. 7(4)(9) modified (1.3.2000) by S.I. 2000/414, art. 7(1)(a)(b)
S. 7(4)(9) modified (1.3.2000) by S.I. 2000/415, art. 7(1)(a)(b)
Commencement Information
I1S. 7 wholly in force at 1.3.2000; s. 7 in force for certain purposes at Royal Assent see s. 75(2)(i); s. 7 in force at 1.3.2000 insofar as not already in force by S.I. 2000/183, art. 2(1)
The Whole Act you have selected contains over 200 provisions and might take some time to download. You may also experience some issues with your browser, such as an alert box that a script is taking a long time to run.
Would you like to continue?
The Whole Act you have selected contains over 200 provisions and might take some time to download.
Would you like to continue?
Y Ddeddf Gyfan you have selected contains over 200 provisions and might take some time to download. You may also experience some issues with your browser, such as an alert box that a script is taking a long time to run.
Would you like to continue?
Y Diweddaraf sydd Ar Gael (diwygiedig):Y fersiwn ddiweddaraf sydd ar gael o’r ddeddfwriaeth yn cynnwys newidiadau a wnaed gan ddeddfwriaeth ddilynol ac wedi eu gweithredu gan ein tîm golygyddol. Gellir gweld y newidiadau nad ydym wedi eu gweithredu i’r testun eto yn yr ardal ‘Newidiadau i Ddeddfwriaeth’.
Gwreiddiol (Fel y’i Deddfwyd neu y’i Gwnaed): Mae'r wreiddiol fersiwn y ddeddfwriaeth fel ag yr oedd pan gafodd ei deddfu neu eu gwneud. Ni wnaed unrhyw newidiadau i’r testun.
Pwynt Penodol mewn Amser: This becomes available after navigating to view revised legislation as it stood at a certain point in time via Advanced Features > Show Timeline of Changes or via a point in time advanced search.
Rhychwant ddaearyddol: Indicates the geographical area that this provision applies to. For further information see ‘Frequently Asked Questions’.
Dangos Llinell Amser Newidiadau: See how this legislation has or could change over time. Turning this feature on will show extra navigation options to go to these specific points in time. Return to the latest available version by using the controls above in the What Version box.
Gallwch wneud defnydd o ddogfennau atodol hanfodol a gwybodaeth ar gyfer yr eitem ddeddfwriaeth o’r tab hwn. Yn ddibynnol ar yr eitem ddeddfwriaeth sydd i’w gweld, gallai hyn gynnwys:
This timeline shows the different points in time where a change occurred. The dates will coincide with the earliest date on which the change (e.g an insertion, a repeal or a substitution) that was applied came into force. The first date in the timeline will usually be the earliest date when the provision came into force. In some cases the first date is 01/02/1991 (or for Northern Ireland legislation 01/01/2006). This date is our basedate. No versions before this date are available. For further information see the Editorial Practice Guide and Glossary under Help.
Defnyddiwch y ddewislen hon i agor dogfennau hanfodol sy’n cyd-fynd â’r ddeddfwriaeth a gwybodaeth am yr eitem hon o ddeddfwriaeth. Gan ddibynnu ar yr eitem o ddeddfwriaeth sy’n cael ei gweld gall hyn gynnwys:
liciwch ‘Gweld Mwy’ neu ddewis ‘Rhagor o Adnoddau’ am wybodaeth ychwanegol gan gynnwys