Your rights

How to access information

This allows you to find out what information is held about you on a computer and within some manual records, such as medical records, files held by public bodies and financial information held by credit reference agencies.

Correcting information

This allows you to apply to a court to order a data controller to correct, block, remove or destroy personal details if they are inaccurate or contain expressions of opinion based on inaccurate information.

Preventing processing of information

This means you can ask a data controller not to process information about you that causes substantial unwarranted damage or distress. The data controller is not always bound to act on the request.

Preventing unsolicited marketing

This means a data controller is required not to process information about you for direct marketing purposes if you ask them not to. For example, you have the right to stop unsolicited mail.

Preventing automated decision making

This means you can object to decisions made only by automatic means. For example, where there is no human involvement.

Claiming compensation

This allows you to claim compensation through the courts from a data controller for damage, and in some cases distress, caused by any breach of the act.

Exempt information

This allows you to ask the ICO to investigate and assess whether the data controller has breached the act. Please read our how to complain section, which explains how to do this.

For general guidance on your information rights please read the Personal information toolkit

.