SAR Letter - Acknowledgement
Under the UK GDPR, data subjects have the right to access their personal data.
This is done by means of a data subject access request.
This document has been updated in line with the ICO’s October 2020
guidance. This letter now informs the individual making the request that
the one-month time limit is paused if additional information is required to
clarify the request. Optional prompts have also been included for you to
explain your reasons for seeking clarification and, if applicable and
appropriate, to impose a deadline.
In simple terms, a data controller (i.e. you) has one month to respond to a
subject access request after receiving it, and this period can be extended
by up to two months where a request is complex or there are numerous
requests to handle.
In real terms, the information provided to you in the first instance may
not be enough (and in any event you may need more information to prove the
identity of the person making the request). The UK GDPR actually states that
you must “provide information on action taken on a
request...within one month…”. You must respond, therefore, but that does
not mean you need to provide a full response if you do not have all the
information you require.
This Subject Access Request Acknowledgement Letter should be used as your
initial response to a subject access request. Options are included to
inform the data subject of the normal response time (i.e. one month) and to
request proof of the data subject’s identity – something that should be
confirmed before releasing any personal data – and/or additional
information to clarify the request.
This Subject Access Request Acknowledgement Letter is in open format.
Either enter the requisite details in the highlighted fields or adjust the
wording to suit your purposes.
Once you have purchased access to the appropriate document folder click on
the “Download Document” link below. You will be asked what you want to do
with the file. It is recommended that you save the document to a location
of your choice prior to viewing.