User Rights
The Data Protection Act allows people to request details of the personal information held on them by the BBC. This is called a subject access request. All requests should be forwarded immediately to the Information Policy and Compliance Department. There is a time limit of 40 days for answering requests. Staff must not deal with subject access requests themselves.
Anyone has the right at any time to tell us to stop sending them marketing material, by emailing or writing to the BBC. We must stop sending them such material as soon as is reasonable to do so, and, in any event, within 28 days.
Anyone also has the right to request corrections of any inaccurate information held about them. Wherever possible, an 'update details' feature should be built into web sites to allow users to check and update for themselves any personal details previously supplied.
On any site that uses software alone to take a decision that significantly affects an individual such as to select for jobs or work experience, individuals must be told that if they are not selected they can ask for a review of that decision.
For further advice contact Regulatory Legal Department.