Under the Data Protection Act 1998, consumers have the right to request a copy of the information held about them by businesses on computer and in some manual filing systems. They are also entitled to enquire about how that information is being used by the business.

The ICO has produced guidance to clarify the difference between enquiries that can be dealt with informally and those that a business must process formally under the Act. Businesses can charge up to £10 to process formal enquiries - known as subject access requests - but must process such enquiries within 40 days.

Further practical guidance and examples - including how to handle enquiries that involve providing details about another person - is offered in the ICO's Data Protection Good Practice Note.