Subject Access Request

This document is a subject access request which can be used by an individual to request that an organisation provides the individual with information relating to the personal data of the individual that the organisation holds. Among the information the individual can request are:

• that the organisation confirm they hold the personal data of the individual;
• the type of personal data they have;
• how the individual's personal data is used; and
• how the personal data stored and protected.

More information on the kinds of information that can be requested by the individual can be found on the Information Commissioner's Office website.

How to use this document

The document should be signed and sent to the organisation by the person making the request. It can be sent by post or email. If the organisation has a data protection officer, or provide details of who to contact for privacy or data issues, that address should be used to enable the organisation to deal with the complaint. The individual sending the request may wish to keep a copy for their own records.

After the request has been sent the organisation should respond within one month.

Any Applicable Law

General Data Protection Regulation

Data Protection Act 2018

Help from a lawyer

You can choose to consult a lawyer if you need help.

The lawyer can answer your questions or help you through the process. You will be offered this option when you complete the document.

How to modify the template

You fill out a form. The document is created before your eyes as you respond to the questions.

At the end, you receive it in Word and PDF formats. You can modify it and reuse it.