A Data Subject Access Request (DSAR) in the UK allows individuals to request access to personal data that an organization holds about them. This right is granted under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

​

My best advice is to take elements from different Notices, study them, and adapt them to make them your own. DO NOT just send a template. 

​

Always send your Notices signed for orange postal sticker and keep the receipt your Notice has now been legally served and you can prove postage where they are unable to.

​

Key Points About a DSAR:

 

Who Can Make a Request?

 

Any individual (the "data subject") can request their own personal data.

A third party (e.g., a solicitor or family member) can request on behalf of someone else with their consent.

 

What Information Can Be Requested?

 

Any personal data the organization holds about you, such as:

Contact details (name, address, phone number, email)

Employment records

Medical records (from healthcare providers)

CCTV footage (if identifiable)

Correspondence or notes containing personal information

Information about how your data is being used and who it has been shared with.

 

Who Must Respond?

 

Any organization (public or private sector) that processes personal data, including:

Government bodies

Employers

Banks and financial institutions

Schools and universities

Healthcare providers

How to Make a Request?

Requests can be made in writing or verbally.

​

No specific format is required, but including your name, contact details, and a clear description of the requested data helps speed up the process.

​

Organizations may ask for proof of identity before processing the request.

Response Time?

​

The organization must respond within one month (this can be extended by two months for complex requests).

Does It Cost Anything?

​

It’s usually free, but a reasonable fee may be charged for excessive or repeated requests.

 

Possible Outcomes:

Full access to the requested data

Redacted data (if it includes information about others)

Refusal (if an exemption applies, such as legal privilege or law enforcement purposes)

 

What If the Request Is Refused or Delayed?

 

You can challenge the decision with the organization.

If unsatisfied, you can complain to the Information Commissioner's Office (ICO).

​

A huge Thank you to the authors of the information and documents presented on this site, As I have been sent and watched and read thousands of hours of materials I do not always know who to give the credit to, 

​

Make sure when you send any form of Notice that you don't just change the details and send the example template, they will know you don't really know what your doing, Take bits from various sources and create your own. 

​

DSAR Template - Here

​

NOTICE OF DATA REQUEST UNDER DSAR - Here

​

More information coming soon