Limited requests for subject access where data controller is credit reference agency
4.—(1) In any case in which a request under section 7 of the Act has been made to a data controller who is a credit reference agency, and has been limited, or by virtue of section 9(2) of the Act is taken to have been limited, to personal data relevant to an individual’s financial standing—
(a)the maximum fee which may be required by a data controller under section 7(2)(b) of the Act is £2, and
(b)the prescribed period for the purposes of section 7(8) of the Act is seven working days.
(2) In this regulation “working day” means any day other than—
(a)Saturday or Sunday,
(b)Christmas Day or Good Friday,
(c)a bank holiday, within the meaning of section 1 of the Banking and Financial Dealings Act 1971(1), in the part of the United Kingdom in which the data controller’s address is situated.
(3) For the purposes of paragraph (2)(c) above—
(a)the address of a registered company is that of its registered office, and
(b)the address of a person (other than a registered company) carrying on a business is that of his principal place of business in the United Kingdom.