Subject Access Request

A Subject Access Request is your legal right to ask any organisation for a copy of the personal information they hold about you. It is one of the most useful first moves you can make, because it often hands you the evidence you need for a complaint or a claim.

Write my request

It is free

They cannot charge you in almost all cases.

One month to reply

They must respond within one calendar month of your request.

Anyone holding your data

A company, a council, a school, a hospital, an employer, or a landlord.

What to put in your request

  • 1Your full name and enough detail for them to find you, such as an account or reference number.
  • 2A clear line saying this is a Subject Access Request under the UK GDPR.
  • 3What information you want, and the dates or time period it covers.
  • 4How you want to receive it, and a way for them to reply to you.

If they ignore you

If they refuse, miss the one month deadline, or only send part of it, you can complain to the Information Commissioner's Office, the UK data regulator. Keep a copy of your request and the date you sent it.

This is a plain English guide, not legal advice. Read anything you send before you send it.