Data Protection

How do I Find Out What Information is Held About Me By the Thurrock Thames Gateway Development Corporation Under the Data Protection Act 1998?

What is a subject access request?

People can find out what information is held about them by the Corporation by making a subject access request. They are entitled to know (subject to certain exemptions), the following:-

  • whether personal data is being processed;
  • what personal data is held about them both in manual form and on computer;
  • the purposes for which this data is processed and;
  • to whom the data is or may be disclosed.
  • In most cases, copies of personal data will be provided.

Information about a deceased individual can never be disclosed under the terms of the Data Protection Act 1998.

Personal data will include any documented expression of opinion about an individual.

What personal data is held?

The Corporation holds personal data on the following subjects:

  • Staff Administration.
  • Advertising, Marketing and Public Relations.
  • Accounts and Records.
  • Property Management.
  • Crime Prevention and Prosecution of Offenders.

The type of information held will vary but could include:

  • Personal details.
  • Racial or Ethnic Origin.
  • Employment details.
  • Goods/services provided.
  • Financial details.
  • Family, lifestyle and social circumstances.
  • Offences.

The Data Protection Act 1998 does not allow a person to inspect or have personal access to a file. Files are considered to be confidential and requests to visit an office to look at a file will be refused.

How can I make a subject access request to the Corporation?

Information held within headquarters of the Corporation includes the Executive team and the Resources, Marketing, Delivery and Planning Departments.
If you wish to make a subject access request to the Corporation you should contact us or write to:
PA to Director of Resources
Thurrock Thames Gateway Development Corporation
Gateway House
Stonehouse Lane
RM19 1NX

You should include two appropriate forms of identification as proof of your identity and quote DPA1998

What can I expect?

 We will reply to your request within 40 working days.

You will be given a description of the personal data held, the source of that data, will be told why that data is being processed and to whom that data is or may be disclosed. In most cases you will also be provided with copies of that personal data. This will usually be done free of charge.  If your request is for a very large volume of information and the cost of providing it exceeds £600 we are not obliged to supply the information under section 9A of the Data Protection Act 1998.

If you discover that any personal data is inaccurate and/or incorrect you should in the first instance write to the Chief Information Officer with full details.

Please note that the Chief Information Officer will be unable to deal with your request in the following circumstances:-

  • if 2 forms of identification are not provided;
  • where complying with the request would involve disclosing information relating to somebody else who could be identified from that information (unless that person gives their consent, or it is reasonable to comply without such consent);
  • if the information you request is subject to exemptions set out in the Data Protection Act 1998;
  • where you have previously made a subject access request which the Thurrock Thames Gateway Development Corporation has complied with. - Unless a reasonable period of time has passed since you made the previous request or;
  • where the cost of providing the information (held in an unstructured form), would exceed £600.

If for any reason your request cannot be dealt with (either at all or in part), you will be provided with a written explanation. If it is likely that the requested information can be provided at a later date, you will be told when that is likely to be so that you may resubmit your request.

Where can I go further?

Further information about the Data Protection Act 1998 is available from:
Information Commissioner
Wycliffe House
Water Lane

Telephone: 01625 545 700
Web: (new window)

Data Protection terms - what do they mean?

Data Controller – a person who decides how and why personal data is (or will be), processed. The Director of Resources is the Data Controller for Personal Data within the Thames Gateway Development Corporation.

Data Processing – processing is widely defined by the Act and includes obtaining, recording, holding and disclosing personal data.

Personal data – data which relates to any living individual who can be identified from it, or from data and other information which is in the possession of, or is likely to come into the possession of, the data controller.

This guidance provides general information only. Whilst every effort has been made to ensure that the information is accurate, it is not a full and authoritative statement of the law and you should not rely upon it as such. The Corporation cannot accept responsibility for any errors or omissions as a result of negligence or otherwise.