GDPR SAR Letter Template - Fee and/or Extension

SAR Letter - Fee and/or Additional Time (GDPR-Compliant)


Under the GDPR, data subjects have the right to access their personal data. This is done by means of a data subject access request.

In simple terms, a data controller (i.e. you) has one month to respond to a subject access request after receiving it and this period can be extended by up to two months where a request is complex or there are numerous requests to handle.

This letter template is designed for use when additional time and/or a fee is required and can be used either as the initial response to a data subject access request (if it is immediately clear that the request will be particularly time-consuming and/or complex to handle) or in response to the receipt of additional information.

Please note that if additional time is required to comply with a subject access request, the data subject must be informed of the extension, and the reasons for it, within one month of receipt of their original subject access request.

A “reasonable fee” can be charged in situations where a request is “manifestly unfounded or excessive”. The fee must reflect the true administrative cost of providing the information requested.

This Subject Access Request Letter is in open format. Either enter the requisite details in the highlighted fields or adjust the wording to suit your purposes.

Once you have purchased access to the appropriate document folder click on the “Download Document” link below. You will be asked what you want to do with the file. It is recommended that you save the document to a location of your choice prior to viewing.