What is a Personal
Data Breach?
What Breaches Do I
Relevant Supervisor
How Long Do I Have to
Notify a Breach?
What Information
Notification
Subject Ac
The new rules say you:
• Can't charge for complying with a request (in most cases)
• Have a month to comply (or 3 months where the requests are c
the extension is necessary within a month)
• Can refuse or charge for requests that are clearly unfounded or
same information
• Can refuse a request, but within a month must tell the individual
• Must verify the identity of the person making the request using "
"Reasonable means" normally means you should seek 2 forms of ID.
made and to confirm the details of where the results should be sent to
Schools should decide what is reasonable though. For example, seeki
a request.