Subject access requests

You have the right to ask for access to the personal data we hold about you. You can do this by making a subject access request.

Before you start

Please make sure you're aware of the following:

Make a subject access request

What you can request

You can make a subject access request to find out:

  • what personal information we hold about you
  • how we are using it
  • who we are sharing it with
  • where we got your data from

Proof of identity

We’ll need to identify you and check your details so that we can process your subject access request.

When completing your online request, you’ll be asked to upload a form of ID that shows your name and date of birth (eg a photo of your driving licence).

This will be deleted from our systems as soon as we have verified your ID.

Making a subject access request for someone else

Parents and guardians can make a subject access request for children aged 12 or under.

Children aged 13 and above are considered to be able to understand their information rights. Parents can act on their child’s behalf if they're over 13 – but only with the child’s permission.

AQA reserves the right to ask parents to act on their child’s behalf where it's in the child’s best interests.

How long it will take

We aim to process all valid requests within 30 working days.

It can take us longer to process your request if it's complex or involves records older than 2002.

If your request is for pre-1996 records, it may take us longer to process. This is because we have to get them from our physical archives.

We’ll let you know if your request is delayed.

What we'll send you

When we respond to your request, we'll tell you whether or not we process any of your personal information.

If we do hold your data, we’ll send you copies of it. The information we send you may have data removed. If our records include sensitive information or information about other people, we can't release this to you due to the Data Protection Act 2018.

Your subject access request will stay in our system for two years, after this it will be deleted.

Contact us

If you have any questions, or you’d like to discuss an existing request, please email

Further information

To find out more about the information we collect, what we do with it, how we collect it and keep it secure, read our privacy notice.

You can find out more about what to expect when you make a subject access request on the Information Commissioner’s Office website