SAR Letter - Receipt of Additional Information/ID
Under the UK GDPR, data subjects have the right to access their personal data.
This is done by means of a data subject access request.
In simple terms, a data controller (i.e. you) has one month to respond to a
subject access request after receiving it and this period can be extended
by up to two months where a request is complex or there are numerous
requests to handle.
This letter template should be used to acknowledge the receipt of
additional clarifying information and/or confirmation of identity requested
from the data subject. No additional time is provided for, nor is a fee –
this letter is for use in situations where the request can be handled
within the normal timeframe (subject to the changes to the response window
resulting from asking for ID or clarifying information).
This document received a minor update in November 2020, simplifying the
prompt for the date by which you commit to respond to the SAR. This
improves flexibility in the drafting in light of the ICO’s updated guidance
from October 2020 concerning the changes to the impact of clarification
requests on the time limit for response.
This Subject Access Request Letter is in open format. Either enter the
requisite details in the highlighted fields or adjust the wording to suit
Once you have purchased access to the appropriate document folder click on
the “Download Document” link below. You will be asked what you want to do
with the file. It is recommended that you save the document to a location
of your choice prior to viewing.