Subject Access Request - Template, Sample Form Online

________
________
________

________
________
________
________

________

Dear Sir or Madam,

RE: SUBJECT ACCESS REQUEST — REQUEST FOR ACCESS TO PERSONAL DATA

§1. I write to make a formal Subject Access Request in respect of my personal data. I am entitled to make this request, and you are obliged to comply with it, under data protection law in the United Kingdom.

§2. This request is made pursuant to Article 15 of the UK General Data Protection Regulation (Regulation (EU) 2016/679 as it forms part of the law of England and Wales by virtue of the European Union (Withdrawal) Act 2018) ("the UK GDPR") and sections 45 and 94 of, and the rights conferred by, the Data Protection Act 2018. You may identify my records using the information set out below.

1. Requester (data subject) information

1.1 Full name

________

1.2 Date of birth

________

1.3 Address

________

1.4 Email address

________

1.5 Telephone number

________

1.6 Any reference, account or customer number you hold for me

________

1.7 Proof of identity

In order to verify my identity I enclose copies of the following documents: ________. If you require any further evidence of identity, please let me know promptly and confirm precisely what is needed, so that the statutory time limit for your response is not unduly delayed.

2. Information requested

2.1 In exercise of my right of access under Article 15 of the UK GDPR, I request the following:

2.2 Confirmation and copies of personal data

Please confirm whether or not you are processing personal data concerning me and, if so, provide me with a complete copy of all such personal data that you hold, in an intelligible and permanent form, pursuant to Article 15(1) and Article 15(3) of the UK GDPR.

I should be grateful to receive the requested information in the following format: ________ (for example, a paper copy by post or a copy in a commonly used electronic format).

2.3 Purposes of the processing

Please confirm the purpose or purposes for which my personal data was collected by ________ and the purpose or purposes for which it has been, and continues to be, processed.

2.4 Categories of personal data

Please confirm the categories of personal data concerning me that you are processing.

2.5 Source of the data

Where the personal data was not collected directly from me, please provide any available information as to its source.

2.6 Recipients of the data

Lorem ipsum dolor sit amet consectetur adipiscing elit sed do eiusmod tempor incididunt ut labore et dolore magna aliqua ut enim ad minim veniam quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat duis aute irure dolor in reprehenderit voluptate velit esse cillum dolore eu fugiat.

2.7 Retention of the data

Please confirm the period for which my personal data will be stored or, if that is not possible, the criteria used to determine that period.

2.8 My rights

Please confirm the existence of my right to request rectification or erasure of my personal data, to request restriction of or to object to processing, and my right to lodge a complaint with the Information Commissioner's Office.

2.9 Automated decision-making

Please confirm the existence of any automated decision-making, including profiling, referred to in Article 22 of the UK GDPR and, where applicable, meaningful information about the logic involved and the significance and envisaged consequences of such processing for me.

2.10 If I have not made clear the precise information sought, or if you consider that the scope of this request requires clarification in order for you to respond efficiently, please contact me promptly using the details above rather than treating the request as invalid.

3. Responding to this request

3.1 Should you require any further information from me in order to process this request, please contact me without delay using the details provided above.

3.2 In accordance with Article 12(5) of the UK GDPR, this request should be dealt with free of charge. A fee may only be charged, or the request refused, where it is manifestly unfounded or excessive, which I do not consider to be the case here.

Lorem ipsum dolor sit amet consectetur adipiscing elit sed do eiusmod tempor incididunt ut labore et dolore magna aliqua ut enim ad minim veniam quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat duis aute irure dolor in reprehenderit voluptate velit esse cillum dolore eu fugiat nulla pariatur lorem ipsum dolor sit amet consectetur adipiscing elit sed do eiusmod tempor incididunt ut labore et dolore magna aliqua ut enim ad minim veniam quis nostrud exercitation ullamco laboris.

3.4 If you are unable or unwilling to comply with this request, please set out your reasons in writing, citing the relevant provision of the UK GDPR or the Data Protection Act 2018 relied upon.

3.5 Please direct your response to me at the address and/or email address set out above.

Yours faithfully,

________

Signed: ________
Date: ________

Enclosures: proof of identity as set out at clause 1.7.