Subject Access Request letter under Article 15 UK GDPR and DPA 2018. Formally asserts your right to a copy of all personal data held about you. One-month statutory deadline. From £4.99.
A Subject Access Request (SAR) is the mechanism under Article 15 of the UK GDPR and section 45 of the Data Protection Act 2018 by which any individual can demand a copy of all personal data an organisation holds about them. The right is unconditional — the data subject does not have to explain why they are making the request. The controller must respond within one calendar month, free of charge.
When you want to know what data a business, employer, bank, landlord, insurer or any other organisation holds about you — and what they are doing with it. SARs are used in employment disputes, data protection complaints, pre-litigation disclosure, insurance disputes, tenancy disputes, and any situation where an individual needs to see their own records before deciding how to proceed.
The request letter cites Article 15 UK GDPR and section 45 DPA 2018, specifies the personal data sought, identifies any relevant time period or data category, sets out the controller's one-month response obligation under Article 12(3), confirms the fee-free right, and warns of ICO complaint and section 167 DPA 2018 court order routes if the controller fails to comply.
Loading interactive view…