The ICO exists to empower you through information.

Request

What are the timescales for data controllers to respond to a SAR? What is the decision making criteria for not taking formal action?