Under the Data Protection Act 1988, any person has the “right to see the personal information held about (them) by businesses and organisations in the public and private sectors. This is known as the right of 'subject access'.”

YNiC policy is that all formal Data Protection requests should come through the University Data Controller via <dataprotection@york.ac.uk>. They will contact the relevant person with YNiC who will arrange for all relevant data to be returned via the University Data Controller. A fee (normally £10) will be charged for this. Those wishing to follow this procedure must complete a “data subject enquiry form” and return it to the University Record’s Manager with the appropriate fee and proof of identity. This form is available from the University of York website at http://www.york.ac.uk/recordsmanagement/dpa/subjectaccessform.pdf