-
Due to the Data (Use and Access) Act coming into law on 19 June 2025, this guidance is under review and may be subject to change. The Plans for new and updated guidance page will tell you about which guidance will be updated and when this will happen.
Subject access request self serve
-
1. What is your question about?
Responding to a request (format, templates or how to send a response)
-
2. What is your question?
Do I have to share information stored on a personal computer equipment
The following information might help answer your question
You must provide personal information which is held on personal equipment of your staff (including individual contractors) and your processors’ staff, if you remain the Controller of that data.
This includes where staff are using their smartphones, home computers, private email accounts or private instant messages for work purposes.
We do not expect you to instruct staff to search their personal equipment or private emails or instant messaging applications in response to a SAR, unless you have a good reason to believe they are holding relevant personal data.