OfS privacy

You have a number of rights over the way organisations use your personal information. These are set out in the UK General Data Protection Regulation (UK GDPR).

These rights are:

• the right of access to personal information
• the right to correct inaccurate personal information
• the right to have personal information deleted (within certain limits)
• the right to restrict the use of personal information in certain circumstances
• the right to have a copy of personal information provided to them in a commonly used machine-readable format (to allow easy transfer to another data controller)
• the right to object to the use of personal information where it is based on specific legal bases
• the right to object to the use of automated decision making, including profiling.

These rights are not absolute rights and have certain limitations depending on the request, the lawful bases and the purposes for which we are processing your personal information.

Making a request

We have set out how to request access to a copy of your personal information held by the OfS.

To make a request relating to any of the other above rights, please email: [email protected]

Please set out the detail of your request in the email. We may ask you to confirm your identity before we reply.

Time limit for response

Once we are satisfied that the request is legitimate, we will provide a response within one month (for example, 5 April to 5 May).

If the request is complex, we may extend the deadline for up to two months to provide a full response. If so, we will let you know about the extension and why we have applied it.

Fees

If a request is ‘manifestly unfounded or excessive’ or repetitive, we may either:

• charge a reasonable fee to take into account the administrative costs of providing a response; or
• refuse to act on the request.

In either event, we will set out in writing our reasons.

Contact the OfS's Data Protection Officer

Please email [email protected] if you would like to discuss how your personal data is processed by the OfS and how you may exercise your rights under data protection legislation.

Further information

The Information Commissioner’s Office (ICO) publish further information about these rights:

Read the ICO's guide to your data protection and information rights