GDPR SAR Acknowledgement Letter Template

SAR Letter - Acknowledgement (GDPR-Ready)

BS.DAT.SAR.02

Under the GDPR, data subjects have the right to access their personal data. This is done by means of a data subject access request.

In simple terms, a data controller (i.e. you) has one month to respond to a subject access request after receiving it, and this period can be extended by up to two months where a request is complex or there are numerous requests to handle.

In real terms, the information provided to you in the first instance may not be enough (and in any event you may need more information to prove the identity of the person making the request). The GDPR actually states that you must “provide information on action taken on a request...within one month…”. You must respond, therefore, but that does not mean you need to provide a full response if you do not have all the information you require.

This Subject Access Request Acknowledgement Letter should be used as your initial response to a subject access request. Options are included to inform the data subject of the normal response time (i.e. one month) and to request additional information and/or proof of the data subject’s identity – something that should be confirmed before releasing any personal data.

This Subject Access Request Acknowledgement Letter is in open format. Either enter the requisite details in the highlighted fields or adjust the wording to suit your purposes.

Once you have purchased access to the appropriate document folder click on the “Download Document” link below. You will be asked what you want to do with the file. It is recommended that you save the document to a location of your choice prior to viewing.

Top