Personal Data Requests

How to access the personal information held or processed by MRWA

You have the right to get a copy of the personal information and data that is held about you by MRWA. This is known as a subject access request (SAR).

This right of subject access means that you can make a request under the General Data Protection Regulation 2016 and the Data Protection Act 2018 to any organisation processing your personal data. The Regulations and the Act calls these organisations ‘data controllers’. Merseyside Recycling and Waste Authority is a data controller for the purposes of the Regulations. You can ask the Authority, if you think we are holding, using or sharing the personal information about you.

The Authority’s Personal Data Protection Policy details how both officer and elected members ensure that personal data that is received, collected and processed by the Authority is kept secure and retained as part of the Authority’s statutory duties, and in the delivery of its services to the public.


The Authority will be able to supply you with copies of both paper and computer records and other related information. The Authority has 30 days to respond to your request. However, it is important to remember that not all personal information is covered and there are ‘exemptions’ within the Regulations and the Act which may allow an organisation to refuse to comply with your subject access request in certain circumstances.

The Authority, in line with its statutory duties publishes a detailed Privacy Notice that covers all of the sets of personal data that it retains and processes for the purpose of delivering its services, operations and public facilities. A copy of the most current Privacy Notice can be found here:


How do I make a request?

(a) To make a subject access request, follow these steps:

It will save you time if you do the following before writing your request:

  • Find out the right department and the right person to send the request to.
  • Calling an organisation’s helpline or checking their privacy notice or policy on their website may help you find this out.
  • Make sure you know all the information you need.

(b) When requesting your personal information from an organisation, you should include the following information:

  • Your full name, address and contact telephone number.
  • Any information used by the organisation to identify or distinguish you from others of the same name (account numbers, unique ID’s etc).
  • Details of the specific information you require and any relevant dates

(c) It may also be helpful to include:

  • A reference to the 30-day deadline that applies when dealing with requests to provide personal information.
  • A reference to the General Data Protection Regulations 2018 and Data Protection Act 2018 and subject access requests.
  • A reference to the assistance that the Information Commissioner’s Office can provide.

Please note : you also have the right to ask about any logic involved in any automated decisions made about you.

For more information about making requests for personal data, the Information Commissioners Office (ICO) website has more information or call on Tel: 0303 123 1113 (local rate – calls to this number cost the same as calls to 01 or 02 numbers). If you’re calling from outside the UK, you may not be able to use the 03 number, so please call +44 1625 545 700. The ICO’s normal opening hours are Monday to Friday between 9am and 5pm (excluding bank holidays).