SAR Letter - Acknowledgement
Under the UK GDPR, data subjects have the right to access their personal data. This is done by means of a data subject access request.
This document has been updated in line with the ICO’s October 2020 guidance. This letter now informs the individual making the request that the one-month time limit is paused if additional information is required to clarify the request. Optional prompts have also been included for you to explain your reasons for seeking clarification and, if applicable and appropriate, to impose a deadline.
In simple terms, a data controller (i.e. you) has one month to respond to a subject access request after receiving it, and this period can be extended by up to two months where a request is complex or there are numerous requests to handle.
In real terms, the information provided to you in the first instance may not be enough (and in any event you may need more information to prove the identity of the person making the request). The UK GDPR actually states that you must “provide information on action taken on a request...within one month…”. You must respond, therefore, but that does not mean you need to provide a full response if you do not have all the information you require.
This Subject Access Request Acknowledgement Letter should be used as your initial response to a subject access request. Options are included to inform the data subject of the normal response time (i.e. one month) and to request proof of the data subject’s identity – something that should be confirmed before releasing any personal data – and/or additional information to clarify the request.
This Subject Access Request Acknowledgement Letter is in open format. Either enter the requisite details in the highlighted fields or adjust the wording to suit your purposes.
Once you have purchased access to the appropriate document folder click on the “Download Document” link below. You will be asked what you want to do with the file. It is recommended that you save the document to a location of your choice prior to viewing.