I need to complete a Subject access request

When did you receive the request? *

More information

You should calculate the time limit from the day you receive the request (whether it is a working day or not) until the corresponding calendar date in the next month. For example, if an organisation receives a request on 3 September, the time limit will start from the same day. This gives the organisation until 3 October to comply with the request. If the corresponding date falls on a weekend or a public holiday, you have until the next working day to respond.

Over a month ago

Less than a month ago

Do you understand what information the individual is requesting? *

Yes

No

Does the data requested include information about other people? *

Yes

No

Is the requester a child? *

More information

In Scotland, a person aged 12 years or over is presumed to be of sufficient age and maturity to be able to exercise their right of access, unless the contrary is shown. This presumption does not apply in England and Wales or in Northern Ireland, where competence is assessed depending upon the level of understanding of the child, but it does indicate an approach that will be reasonable in many cases.

Yes

No

Has the request been made on someone else's behalf? *

More information

The GDPR does not prevent an individual making a subject access request via a third party, for example a solicitor may be acting on behalf of a client or an individual may be more comfortable allowing someone else to act for them. In these cases, you need to be satisfied that the third party making the request is entitled to act on behalf of the individual. The third party is responsible for providing evidence such as written authority.

Yes

No

Does the request ask for large amounts of personal data? *

Yes

No