Select Your Language

Data Protection

The Data Protection Act 1998 provides you with a number of rights, including the right to request information which we hold about you, referred to as a ‘Subject Access Request’.

Requesting your personal information

Your Subject Access Request will normally need to be submitted to us in writing. It will also help if you mark your request ‘Subject Access Request’. You should also try to specify the personal information you require.

A Subject Access Request should be marked for the attention of the Information and Data Protection Officer. It can be sent by email to or by post to the following address:

Information and Data Protection Officer
Public Services Ombudsman for Wales
1 Ffordd yr Hen Gae
CF35 5LJ


We will provide you with a response as soon as possible, and within 40 calendar days of the date of your request. If we require further information from you before we can respond, we will let you know. However, the time limit for response will be suspended until we receive the additional information we require.

Exempt Information

All of our investigations are conducted in private, and our governing legislation places restrictions on the disclosure of information obtained by this office. The Data Protection Act contains exemptions from the requirement to supply certain information in response to a Subject Access Request. In the event that information is withheld from you, you will be provided with a clear explanation as to why this has been necessary.

Internal Review

If you are dissatisfied with the response you have received to your Subject Access Request, you can request an internal review.  All reviews will follow the same procedure set out in our Freedom of Information pages here.