London Borough of Lambeth Subject Access Requests policy

1. It will be the council's policy to ensure that all Subject Access Requests are acknowledged in seven calendar days. At the time of acknowledgement, individuals will be told whether any further information or a fee is required.
2. As the council has a responsibility towards the council taxpayer for providing a service which is value for money, it will be the council's policy to charge £10 per Subject Access Request (as permitted by the law).
3. Individuals will be required to provide proof of identity and residence before personal data will be disclosed. This is to prevent unauthorised disclosures to third parties.
4. Where a request is made by an agent on behalf of an individual, a request will only be fulfilled where the agent can provide proof of authority to act on the individual's behalf (subject to section 1.5 of the council's Subject Access Guidance Manual).
5. We will produce Subject Access Request forms to assist an individual in making a request. These forms will be made available on request and will be placed on the council's website.
6. Every department will have (at least) one nominated Data Protection Officer who will assist the council's Data Protection Advisor in fulfilling subject access requests.
7. Training will be provided to the key staff that will be using this policy and accompanying guidance.