You are here:

Last updated on 5 November 2018
Ref: 34360
School types: All · School phases: All

Individuals have the right to request access to the information your school holds about them, under the GDPR. Use this guidance and our template forms to help you comply with subject access requests and know when you can refuse them.

Article tools


  1. What are subject access requests?
  2. Template forms to help DPOs handle requests
  3. Requests from parents about their children's data
  4. Refusing a request
  5. Must schools still respond during the summer holidays? 

The Key has taken great care in publishing this article. However, some of the article's content and information may come from or link to third party sources whose quality, relevance, accuracy, completeness, currency and reliability we do not guarantee. Accordingly, we will not be held liable for any use of or reliance placed on this article's content or the links or downloads it provides. This article may contain information sourced from public sector bodies and licensed under the Open Government Licence.