General Data Protection Directive

Symbol used by St. Michael's House in respect of GDPR LawGeneral Data Protection Regulation (GDPR) signals a new generation of data protection laws which will impact all businesses and charities affecting how they collect, store and use personal data.

St. Michael’s House management team are working to ensure service users, staff and family information is managed correctly. The GDPR offers an opportunity to St. Michael’s House to improve our data systems to continual provide a integrated updated information system to all.

Subject Access Request- You can request your personal information from St. Michael's House

Rights of Access:

Under Data Protection legislation, individuals have a right to obtain from St Michael’s House, a copy of any personal information held on them either on a computer or any structured filing system. This is commonly referred to as a Subject Access Request.

How to make a Request?

A request must be made in writing, you can use the St Michael’s House subject access request form which is available here. You may be asked to provide additional information around proof of identity and address to ensure that the person making the access request is acting legitimately.

Is there a fee?

There is no fee applicable under GDPR to make an access request for your own personal data, unless the request is considered manifestly unfounded or excessive.

When should a response be issued?

Under the General Data Protection Regulation the information requested must be provided within one month. Where requests are complex or involve a large number of requests this time limit may be extended for a further two months.

Are there exceptions to the right of access?

Some exceptions do apply to the release of data including access to third party data, legally privileged data, data required for the prevention, investigation or prosecution of criminal offences.

Right of Appeal

If St Michael’s House fails to comply with a valid data access request, the requester has the right to make a complaint to the Data Protection Commission. The Commissioner will investigate the matter and has wide powers to ensure the organisation complies with the provisions of the Acts.

Complaints should be made in writing, including email, to the Data Protection Commission at:

Data Protection Commission, 21 Fitzwilliam Square South Dublin 2 D02 RD28 Ireland

Tel: +353 578 684 800 Email: info@dataprotection.ie.

Download Subject Access Request Infomation .                              Download Subject Access Request Form

GDPR Guidelines

As part of good governance, St. Michael’s House adhere to the following guidelines.

Easy to Read Poster of St. Michael's House GDPR guidelines 2018

Cover image for link to GDPR Information

Cover image for GDPR and You