GENERAL DATA PROTECTION REGULATION A current or past member or parent/guardian may ask for their data to be disclosed to them – this is a Subject Access Request SAR Please follow the link below and the Croydon data controller will compile the data we hold and return to you within  30 days. SAR – Subject Access Request PLEASE NOTE we are unable to return data regarding DBS, The Scout Association does not hold or process this data.  A SAR must be submitted to the Atlantic DBS service. Data Breach It may occur that personal data is disclosed externally accidentally or removed from the Scout Group, District, County, Area, Region or Country via malicious means. In the event of a breach, via malicious means or through accidental disclosure, you are obligated to do the following: • report the breach to the DPO – Richard Goad. • complete an ICO data protection breach notification form – Here GDPR FAQs