How to get a copy of the data a company holds about you, and how long it has to reply

Data Protection Act, 2019; Data Protection Regulations, 2021 · sources read 4 Oct 2026

Ask the company or office for your personal data, ideally using Form DPG 2. It must give you access within 7 days, and it cannot charge you for it.

How long: 7 days from your request
Deadline: A correction must be made within 14 days. If they refuse, they must tell you in writing, with reasons, within 7 days.
Deadline: They must respond to a request to delete your data within 14 days.
Where: The company or office holding your data; if it refuses, the Office of the Data Protection Commissioner

What you need

Form DPG 2 (Request for access to personal data), in the Data Protection (General) Regulations, 2021

Send your request to the company or office holding your data. You can use Form DPG 2 from the Data Protection (General) Regulations.
You are entitled to know whether they process your data and to see it, plus why they use it, who they share it with, how long they keep it and where they got it.
If the data is wrong, ask them to correct it with Form DPG 3. To have it deleted, use Form DPG 5.
If they refuse or do not reply, complain to the Data Commissioner, by speaking to them or in writing.

You cannot be charged for getting access to your data.
A company can refuse to delete data it needs for a legal duty, a legal claim, public-interest work, research or free expression.

Anyone whose personal data a company, government office or other organisation holds.
A parent or guardian can ask for a child's data; anyone else can ask on your behalf only if you authorise them.

Official sources (2)