Data Subject Access Request Letter

A DSAR template gives you a ready-made way to exercise your legal right to access personal data held about you by any organisation in the UK. Under UK GDPR Article 15 and the Data Protection Act 2018, every individual has the right to request a copy of all personal data an organisation holds about them — and they must respond within one calendar month, free of charge.

You don't need to give a reason for making a data subject access request, and organisations cannot ask why you are making one. However, being specific about what data you want — such as emails mentioning your name, HR records, call recordings, or CCTV footage from a particular date — helps ensure you receive the information you need rather than a generic data dump. If an organisation fails to respond within the statutory deadline, or provides an incomplete response, you can lodge a complaint with the Information Commissioner's Office (ICO), who has the power to order compliance and issue fines of up to £17.5 million for serious breaches.

PostRight's DSAR letter clearly cites the legal basis, specifies the data you are requesting, and sets a formal deadline — creating the paper trail that the ICO requires if you need to escalate.