________
________
________
________
________
________
________
________
Dear Sir or Madam,
RE: SUBJECT ACCESS REQUEST — REQUEST FOR ACCESS TO PERSONAL DATA
§1. I write to make a formal Subject Access Request in respect of my personal data. I am entitled to make this request, and you are obliged to comply with it, under data protection law in the United Kingdom.
Lorem ipsum dolor sit amet consectetur adipiscing elit sed do eiusmod tempor incididunt ut labore et dolore magna aliqua ut enim ad minim veniam quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat duis aute irure dolor in reprehenderit voluptate velit esse cillum dolore eu fugiat nulla pariatur lorem ipsum dolor sit amet consectetur adipiscing elit sed do eiusmod tempor incididunt ut labore et dolore magna.
1. Requester (data subject) information
1.1 Full name
________
1.2 Date of birth
________
1.3 Address
________
1.4 Email address
________
1.5 Telephone number
________
1.6 Any reference, account or customer number you hold for me
________
1.7 Proof of identity
In order to verify my identity I enclose copies of the following documents: ________. If you require any further evidence of identity, please let me know promptly and confirm precisely what is needed, so that the statutory time limit for your response is not unduly delayed.
2. Information requested
2.1 In exercise of my right of access under Article 15 of the UK GDPR, I request the following:
2.2 Confirmation and copies of personal data
Please confirm whether or not you are processing personal data concerning me and, if so, provide me with a complete copy of all such personal data that you hold, in an intelligible and permanent form, pursuant to Article 15(1) and Article 15(3) of the UK GDPR.
I should be grateful to receive the requested information in the following format: ________ (for example, a paper copy by post or a copy in a commonly used electronic format).
2.3 Purposes of the processing
Please confirm the purpose or purposes for which my personal data was collected by ________ and the purpose or purposes for which it has been, and continues to be, processed.
2.4 Categories of personal data
Please confirm the categories of personal data concerning me that you are processing.
2.5 Source of the data
Where the personal data was not collected directly from me, please provide any available information as to its source.
2.6 Recipients of the data
Please confirm the recipients or categories of recipient to whom my personal data has been or will be disclosed, including in particular any recipients in third countries or international organisations and, where applicable, the appropriate safeguards relied upon under Chapter V of the UK GDPR for any such transfer.
2.7 Retention of the data
Please confirm the period for which my personal data will be stored or, if that is not possible, the criteria used to determine that period.
2.8 My rights
Please confirm the existence of my right to request rectification or erasure of my personal data, to request restriction of or to object to processing, and my right to lodge a complaint with the Information Commissioner's Office.
2.9 Automated decision-making
Please confirm the existence of any automated decision-making, including profiling, referred to in Article 22 of the UK GDPR and, where applicable, meaningful information about the logic involved and the significance and envisaged consequences of such processing for me.
2.10 If I have not made clear the precise information sought, or if you consider that the scope of this request requires clarification in order for you to respond efficiently, please contact me promptly using the details above rather than treating the request as invalid.
3. Responding to this request
3.1 Should you require any further information from me in order to process this request, please contact me without delay using the details provided above.
3.2 In accordance with Article 12(5) of the UK GDPR, this request should be dealt with free of charge. A fee may only be charged, or the request refused, where it is manifestly unfounded or excessive, which I do not consider to be the case here.
Lorem ipsum dolor sit amet consectetur adipiscing elit sed do eiusmod tempor incididunt ut labore et dolore magna aliqua ut enim ad minim veniam quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat duis aute irure dolor in reprehenderit voluptate velit esse cillum dolore eu fugiat nulla pariatur lorem ipsum dolor sit amet consectetur adipiscing elit sed do eiusmod tempor incididunt ut labore et dolore magna aliqua ut enim ad minim veniam quis nostrud exercitation ullamco laboris.
3.4 If you are unable or unwilling to comply with this request, please set out your reasons in writing, citing the relevant provision of the UK GDPR or the Data Protection Act 2018 relied upon.
3.5 Please direct your response to me at the address and/or email address set out above.
Yours faithfully,
________
Signed: ________
Date: ________
Enclosures: proof of identity as set out at clause 1.7.