-
Due to the Data (Use and Access) Act coming into law on 19 June 2025, this guidance is under review and may be subject to change. The Plans for new and updated guidance page will tell you about which guidance will be updated and when this will happen.
Subject access request self serve
-
1. What is your question about?
Letters of authority or consent for third party requests (including requests for a child's information)
-
2. What is your question?
Can a request be made on behalf of someone else?
The following information might help answer your question
Yes. An individual can ask a third party (eg a relative, friend or solicitor) to make a SAR on their behalf.
The UK GDPR does not prevent this, however you need to be satisfied that the third party making the request is entitled to act on behalf of the individual. It is the third party’s responsibility to provide you with evidence of this. For example by providing a written authority, stating that they give the third party permission to make a SAR on their behalf.
You can read our more detailed guidance on whether an individual can make a request on behalf of someone else for a full explanation of the factors you need to consider.