Q. How can I find out what information is held about me?
A. A request for a copy of information held about you is known as a "Subject Access Request." Requests must be made to the person or organisation ("data controller") who you think processes (for example, holds discloses and/or uses) the information to which you want access. Requests must be made in writing and must be accompanied by the appropriate fee (as to which see below).
You are entitled to be told if any personal data are held about you AND, if so:
· to be given a description of the data;
· to be told for what purposes the data are processed and
· To be told the recipients or the classes of recipients to whom the data may have been disclosed.
This information should include what sort of data are held, the purposes for which the data are processed and the type of organisation or people to whom the data may be disclosed.
You are also entitled;
· to be given a copy of the information with any unintelligible terms explained;
· to be given any information available to the controller about the source of the data;
· to be given an explanation as to how any automated decisions taken about you have been made
Q. How much does it cost to gain access?
A. Data controllers may charge a fee of up to £10 for responding to a subject access request.
Unless you specifically ask to be given an explanation as to how any automated decisions about you have been made, the data controller is not obliged to provide such information. If you do specifically include a request for such information in your request then the data controller must provide it within the single £10 fee. If you do not, then the data controller is entitled to charge a separate fee of no more than £10 for the separate provision of such information. You should also be aware of the fact that data controllers may not be required to provide such information if, or to the extent that, the information amounts to a trade secret.
Different fee structures apply to some 'accessible records' such as health, education or social services files.
http://www.dataprotection.gov.uk