How do you write a formal subject access request?

If you wish to make a subject access request, there is no particular format for doing so – you can simply write to or email the organisation and ask it to provide all of the information about you it is required to disclose under the Data Protection Act.

What is a SAR template?

This document is a subject access request which can be used by an individual to request that an organisation provides the individual with information relating to the personal data of the individual that the organisation holds.

What can you ask for in a subject access request?

You can make a subject access request to find out:

  • what personal information an organisation holds about you;
  • how they are using it;
  • who they are sharing it with; and.
  • where they got your data from.

How do I write a GDPR request?

The GDPR does not set out any particular method for making a valid access request, therefore a request may be made by an individual in writing or verbally.

How do you write an email asking for access?

How to write an email requesting something

  1. Organize your request.
  2. Write an approachable subject line.
  3. Begin with a formal salutation.
  4. Express your request.
  5. Include benefits for the recipient.
  6. Conclude with a call to action.
  7. Focus on the recipient.
  8. Include additional documents.

Does SAR have to be in writing?

An individual can make a SAR verbally or in writing, including on social media. A request is valid if it is clear that the individual is asking for their own personal data. An individual does not need to use a specific form of words, refer to legislation or direct the request to a specific contact.

Does a subject access request include text messages?

Additionally, communications across other platforms will have to be included; so text messages, Whatsapp and Twitter, if you use these in your business for communication purposes; all adding to the pile.

How do I write a letter of request for data?

I am writing this letter to seek permission from you for data collection from the employees. This data will be used to analyze the statistics and all other required information. I request you to kindly approve my request and allow me to collect data for the research being done.

What needs to be included in a SAR?

Individuals have the right to access and receive a copy of their personal data, and other supplementary information. This is commonly referred to as a subject access request or ‘SAR’. Individuals can make SARs verbally or in writing, including via social media.

Do I have the right to see emails about me?

The right of access only applies to the individual’s personal data contained in the email. This means you may need to disclose some or all of the email to comply with the SAR. Just because the contents of the email are about a business matter, this does not mean that it is not the individual’s personal data.