Data Protection Act, 1988
11 of 50
https://www.irishstatutebook.ie/eli/1988/act/25/enacted/en/print.html?printonload=true
(ii) be supplied by the data controller with a copy of the information constituting any such data,
as soon as may be and in any event not more than 40 days after compliance by the individual with the
provisions of this section; and, where any of the information is expressed in terms that are not intelligible
to the average person without explanation, the information shall be accompanied by an explanation of
those terms.
(b) A request for the information specified in subparagraph (i) of subsection (1) (a) of this section shall, in the
absence of any indication to the contrary, be treated as including a request for a copy of the information
specified in subparagraph (ii) of the said subsection (1) (a).
(c) (i) A fee may be payable to the data controller concerned in respect of such a request as aforesaid and the
amount thereof shall not exceed such amount as may be prescribed or an amount that in the opinion
of the Commissioner is reasonable, having regard to the estimated cost to the data controller of
compliance with the request, whichever is the lesser.
(ii) A fee paid by an individual to a data controller under subparagraph (i) of this paragraph shall be
returned to him if his request is not complied with or the data controller rectifies or supplements, or
erases part of, the data concerned (and thereby materially modifies the data) or erases all of the data
on the application of the individual or in accordance with an enforcement notice or an order of a court.
(2) Where pursuant to provision made in that behalf under this Act there are separate entries in the register in
respect of data kept by a data controller for different purposes, subsection (1) of this section shall apply as if it provided
for the making of a separate request and the payment of a separate fee in respect of the data to which each entry
relates.
(3) An individual making a request under this section shall supply the data controller concerned with such
information as he may reasonably require in order to satisfy himself of the identity of the individual and to locate any
relevant personal data or information.
(4) Nothing in subsection (1) of this section obliges a data controller to disclose to a data subject personal data
relating to another individual unless that other individual has consented to the disclosure:
21.02.23, 18:36