The ICO exists to empower you through information.

Subject access request self serve

1. What is your question about?

Letters of authority or consent for third party requests (including requests for a child's information)

Change this answer
2. What is your question?

Can a request be made on behalf of someone else?

Change this answer

The following information might help answer your question

Yes. An individual can ask a third party (eg a relative, friend or solicitor) to make a SAR on their behalf.

The UK GDPR does not prevent this, however you need to be satisfied that the third party making the request is entitled to act on behalf of the individual. It is the third party’s responsibility to provide you with evidence of this. For example by providing a written authority, stating that they give the third party permission to make a SAR on their behalf.

You can read our more detailed guidance on whether an individual can make a request on behalf of someone else for a full explanation of the factors you need to consider.