You are here:

Last reviewed on 24 March 2021
Ref: 34360
School types: All · School phases: All

Individuals have the right to request access to the information your school holds about them, under the UK GDPR. Use this guidance and our template forms to help you comply with subject access requests and know when you can refuse them.

This article is based on:

What are subject access requests?

Individuals have a right to access (or request someone access on their behalf) the personal data you hold about them. This is set out under article 15 of the UK GDPR and is explained further here.

This allows them to be aware of, and verify the lawfulness of, you processing this data. 

How soon must we comply with a request? You must comply as soon as you can, at the latest within 1 month of receiving:  The request, or   Any information you request to confirm the identity of the person making the request  A fee (only in certain circumstances

More from The Key


Bitesize training with a big impact

Our on-demand training has your whole board covered and lets them learn at a time and pace that suits them.

Help your new governors hit the ground running with our expertly-designed induction training, and our role-specific courses support your link governors develop key skills and confidence in their role.


New eLearning: DSL refresher training

Your DSL’s training should be refreshed at least once every 2 years. 

Designed in collaboration with safeguarding experts, our 2.5 hour online refresher training course reminds DSLs how to put their knowledge into practice, with in-depth, real-world scenarios.


The Key has taken great care in publishing this article. However, some of the article's content and information may come from or link to third party sources whose quality, relevance, accuracy, completeness, currency and reliability we do not guarantee. Accordingly, we will not be held liable for any use of or reliance placed on this article's content or the links or downloads it provides. This article may contain information sourced from public sector bodies and licensed under the Open Government Licence v3.0.