Subject Access Request

Retrieves all held info for offender

Changed on
  • NOMIS Prison Number (PRN) must be provided as part of the request.
  • The role ROLE_SAR_DATA_ACCESS is required
  • If the product uses the identifier type transmitted in the request, it can respond with its data and HTTP code 200
  • If the product uses the identifier type transmitted in the request but has no data to respond with, it should respond with HTTP code 204
  • If the product does not use the identifier type transmitted in the request, it should respond with HTTP code 209
get/subject-access-request

Request

  • Base URL
    https://complexity-of-need-staging.hmpps.service.justice.gov.uk
  • URL
    https://complexity-of-need-staging.hmpps.service.justice.gov.uk/subject-access-request
  • Auth
    API key in header Authorization

Query parameters

prnstring

NOMIS Offender Number

Example:A0000AA

NOMIS Prison Reference Number

crnstring

nDelius Case Reference Number. Do not use this parameter for this endpoint

fromDatestring

Optional parameter denoting minimum date of event occurrence which should be returned in the response (if used, both dates must be provided)

toDatestring

Optional parameter denoting maximum date of event occurrence which should be returned in the response (if used, both dates must be provided)

Response

Offender found

Example response

{
  "content": [
    {
      "level": "low",
      "createdTimeStamp": "2021-03-02T17:18:46.457Z",
      "updatedTimeStamp": "2021-03-02T17:18:46.457Z"
    }
  ]
}

Changes

    • breaking

      removed the required property // from the response with the status

    • breaking

      removed the required property // from the response with the status

    • warning

      removed the optional property // from the response with the status