About This Letter
A Data Subject Access Request gives you a ready-made way to exercise your legal right to access personal data held about you by any organisation in the UK. Under UK GDPR Article 15 and the Data Protection Act 2018, every individual has the right to request a copy of all personal data an organisation holds about them. They must respond within one calendar month, free of charge.
You do not need to give a reason for making a data subject access request, and organisations cannot ask why you are making one. However, being specific about what data you want, such as emails mentioning your name, HR records, call recordings, or CCTV footage from a particular date, helps ensure you receive the information you need rather than a generic data dump. If an organisation fails to respond within the statutory deadline, or provides an incomplete response, you can lodge a complaint with the Information Commissioner's Office, who has the power to order compliance and issue fines of up to £17.5 million for serious breaches.
PostRight's DSAR letter clearly cites the legal basis, specifies the data you are requesting, and sets a formal deadline, creating the paper trail that the ICO requires if you need to escalate. Sending your DSAR by post rather than email is strategically important. A posted letter creates a formal dated record of your request, which the ICO will ask for if you need to escalate a failure to respond. It also ensures your request is treated as a formal legal notice rather than a general enquiry.
Send This Letter
- Guided step by step in the letter builder
- See the finished letter before you pay
- Printed and posted by Royal Mail
- Tracked delivery available
From £2.79, including printing and Royal Mail postage. Nothing to add.