This article is based on:
- The right of access section in the guide to the UK General Data Protection Regulation (UK GDPR) published by the Information Commissioner's Office (ICO)
- Advice from Forbes Solicitors
What are subject access requests?
Individuals have a right to access (or request someone access on their behalf) the personal data you hold about them. This is set out under the UK GDPR and is explained further in guidance from the ICO.
This allows individuals to be aware of, and verify the lawfulness of, you processing this data.
How soon must we comply with a request? You must comply as soon as you can, at the latest within 1 month of receiving: The request, or Any information you request to confirm the identity of the person making the request A fee (only in certain circumstances – see