Access to Personal Data


Under the terms of the Data Protection Act 2018 all individuals, including staff, students and other users of the University, have the right to access personal data relating to themselves that is held by the University. Exercising the subject access right is commonly known as making a subject access request.

Any individual who wishes to exercise this right can submit a subject access request to the University’s Data Protection Officer by completing the electronic form or by writing to :

Data Protection Officer, University of the Highlands and Islands, 12b Ness Walk, Inverness, IV3 5SQ

  1. The request should include information about yourself and your connection to the university, including your contact details, and as much detail as possible regarding the information you wish to access (e.g. where and by whom information is believed to be held, specific details of information required etc.).
  2. You are not required to state why you wish to access the information: the details we require are merely those that will aid the efficient location and retrieval of information.
  3. Once the Data Protection Officer receives a Subject Access Request, all efforts will be made to fully comply within 28 days. In any event, you will receive all the information that has been located and can be released within 28 days and an explanation for any information that cannot be provided at that time.
  4. In accordance with the DPA, the University does not usually release information held about individuals without their consent. If information held about you also contains information related to a third party, the University will make every effort to suitably anonymise or redact the information. If this is not possible and the University is unable to secure the relevant consent, the University may choose not to release the information.
  5. Our privacy notice for gathering this data.

All queries should be directed to the university’s Data Protection Officer in the first instance.