Section 30
of Personal Data Protection Act 2010
Section 30
An individual is entitled to be informed by a data user whether personal data of which that individual is the data subject is being processed by or on behalf of the data user.
Personal Data Protection 33
(2)
A requestor may, upon payment of a prescribed fee, make a data access request in writing to the data user—
(a)
for information of the data subject’s personal data that is being processed by or on behalf of the data user; and
(b)
to have communicated to him a copy of the personal data in an intelligible form.
(3)
A data access request for any information under subsection (2)
shall be treated as a single request, and a data access request for information under paragraph (2)(a) shall, in the absence of any indication to the contrary, be treated as extending also to such request under paragraph (2)(b).
(4)
In the case of a data user having separate entries in respect of personal data held for different purposes, a separate data access request shall be made for each separate entry.
(5)
Where a data user does not hold the personal data, but controls the processing of the personal data in such a way as to prohibit the data user who holds the personal data from complying, whether in whole or part, with the data access request under subsection (2) which relates to the personal data, the first-mentioned data user shall be deemed to hold the personal data and the provisions of this Act shall be construed accordingly.