Subject Access Request (UK GDPR)

Before you send it

• Send the request to the organisation's data protection officer or privacy team. Use email where possible so the one-month clock starts on receipt.
• You are entitled to a copy of the personal data, plus information about why it is held, who it is shared with, where it came from and how long it will be kept.
• The organisation can extend the response window by up to two further months for complex requests, but must tell you within the first month.
• If the response is inadequate or absent, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk.

The template

Square brackets mark fields to replace with your own details.

[Your name]
[Your address]
[Postcode]
[Date]

[Organisation — Data Protection Officer / Privacy Team]
[Address]

By email: [privacy email]

Subject Access Request under Article 15 UK GDPR

Dear Sir/Madam,

I am writing to make a Subject Access Request under Article 15 of the UK GDPR
and section 45 of the Data Protection Act 2018.

I would like a copy of:
 - all personal data you hold about me;
 - the purposes for which it is processed;
 - the categories of personal data concerned;
 - the recipients or categories of recipient to whom it has been or will be
   disclosed, including any in third countries;
 - where possible, the envisaged retention period;
 - the source of the personal data, if not collected from me;
 - confirmation of any automated decision-making, including profiling, and
   meaningful information about the logic involved.

To help you locate the data, my details are:
 - Full name: [name and any previous names]
 - Date of birth: [DD/MM/YYYY]
 - Address(es) used in the last [X] years: [addresses]
 - Customer / account / reference numbers: [list]
 - Approximate date range of my dealings with you: [dates]

Please send the response by [email / secure portal / post to the address
above]. I would prefer a portable, machine-readable format where possible
(such as PDF or CSV).

I understand you must respond within one month under Article 12(3), with a
possible two-month extension for complex requests. I look forward to your
acknowledgement and substantive response.

Yours faithfully,

[Your signature]
[Your printed name]