SAR Letter - Acknowledgement (GDPR-Compliant)
Under the GDPR, data subjects have the right to access their personal data.
This is done by means of a data subject access request.
In simple terms, a data controller (i.e. you) has one month to respond to a
subject access request after receiving it, and this period can be extended
by up to two months where a request is complex or there are numerous
requests to handle.
In real terms, the information provided to you in the first instance may
not be enough (and in any event you may need more information to prove the
identity of the person making the request). The GDPR actually states that
you must “provide information on action taken on a
request...within one month…”. You must respond, therefore, but that does
not mean you need to provide a full response if you do not have all the
information you require.
This Subject Access Request Acknowledgement Letter should be used as your
initial response to a subject access request. Options are included to
inform the data subject of the normal response time (i.e. one month) and to
request additional information and/or proof of the data subject’s identity
– something that should be confirmed before releasing any personal data.
This Subject Access Request Acknowledgement Letter is in open format.
Either enter the requisite details in the highlighted fields or adjust the
wording to suit your purposes.
Once you have purchased access to the appropriate document folder click on
the “Download Document” link below. You will be asked what you want to do
with the file. It is recommended that you save the document to a location
of your choice prior to viewing.