Addresses for Form:

O2 (UK) LIMITED
260 BATH ROAD
SLOUGH
BERKSHIRE
SL1 4DX

ORANGE PLC
ST JAMES'S COURT
GREAT PARK ROAD
BRADLEY STOKE
BRISTOL
BS32 4QJ

T-MOBILE (UK) LTD
HATFIELD BUSINESS PARK
HATFIELD
HERTFORDSHIRE
AL10 9BU

VIRGIN MOBILE TELECOMS LIMITED
120 CAMPDEN HILL ROAD
LONDON
W8 7AR

VODAFONE
VODAFONE HOUSE
THE CONNECTION
NEWBURY
BERKSHIRE
RG14 2FN

FORM: [Insert Your address; account number or reference]

[insert date here]

[paste address from above here]

SUBJECT ACCESS REQUEST FOR COMMUNICATIONS DATA

To the attention of the Data Protection Officer

Dear Sir or Madam

This is a subject access request for disclosure of information under Section 7 of the Data Protection Act 1998. I have been a subscriber since [FORM: subscriber date if known], and my account details are as follows [FORM:insert your account number, name, postal address.]

Please send me the information which I am entitled to under section 7(1). In accordance with that section, please provide a statement:

• confirming whether any personal data is being processed;
• describing the personal data processed;
• specifying the purposes for which data is processed for each category of data, and the recipients of any data disclosed[1];
• detailing any transfersof data outside the UK in whatever form or by whatever means;
• naming the person responsible for the data protection compliance.

This information should include any personal data comprised in, linkable to, or which can be associated with the following identifiers:

• All records relating to telephone calls made from or to the telephone number [FORM: your telephone numbers with this company]
• All records relating to electronic services and text messages made from or to this same telephone number;
• All records relating to billing information, including subscriber data relating to my account.

In particular, the following types of personal data are sought:

• "communications data" as defined by Section 21(4) and Section 21(6) of the Regulation of Investigatory Powers Act 2000;
• any data processed by switches, cells, Message-Transfer-Agents(MTAs), monitoring-systems, voice mail, or other software or hardware devices under your control, which is retained and/or disclosed in hardcopy, electronic media, backup devices, transient storage or otherwise including location information;
• case notes on incidents, events, disclosures, collections, modifications or faults;
• records of disclosures to other parties, including emails;
• the logic of any automated decision processes[2];
• the sources of the personal data.

As required by the Data Protection Act 1998 section 8(2), please provide an explanation of the purpose, meaning, and context of the information. This includes geographical information for any location data that is retained.

You are required to supply this information as soon as possible, no longer than forty days. If possible, I request that the information be provided in electronic form, as allowed under section 8(2) of the DPA 1998. If this is not possible, please provide it to me in hard copy. If you are not providing me with copies of all records that you hold related to this request containing personal information becuase of an exemption in the DPA or for any other reason, please inform me of that fact.

I understand that you are required to properly identify any applicant for access to personal data. Please promptly advise me by electronic mail [Form: email address] or telephone [insert phone number] whether any further information is required from me, or whether the information contained in this letter and/or my personal cheque for the access fee is sufficient. Please advise me by telephone of any further information you require.

If you believe you are not the data controller for any of the above data, please provide the contact details of the organisation you believe to be the controller and explain why you have reached the conclusion why you are not the controller.

Yours faithfully

FORM: your name here. Sign once printed

Notes:

[1] The Office of Information commissioner recommended in Legal Guidance Section 5.3 that

"The Commissioner takes the view that, for any of these three exemptions [crime and taxation] to apply there would have to be a substantial chance rather than a mere risk that in a particular case the purposes would be noticeably damaged. The data controller needs to make a judgement as to whether or not prejudice is likely in relation to the circumstances of each individual case. …If challenged, the data controller must be prepared to defend the decision to rely upon the exemption either to the Commissioner or to the Court. It would, therefore, be advisable for the data controller to ensure that each such decision is taken at an appropriately senior level within the data controller's organisation and for the reasons to be documented."

[2] The Office of Information commissioner recommended in OIC Legal Guidance Section 4.1 on Rights of Subject Access

"Where a decision significantly affecting a data subject is, or is likely to be, made about that data subject by fully automated means, for the purpose of evaluating matters about that data subject such as his performance at work, his creditworthiness, his reliability or his conduct he is entitled to be told of the logic involved in the process. In order to obtain this information the data subject must specifically request it."