Difference between revisions of "Subject Access Request"

From Consumer Wiki
(Related Articles)
m
Line 53: Line 53:
 
==Related Articles==
 
==Related Articles==
  
[[Information Commissioner]]  |  [[Data Controller]]  |  [[Data Subject]]  |  [[Automatic SAR Generator]]
+
[[Letters|List of all letters]]  |  [[Information Commissioner]]  |  [[Data Controller]]  |  [[Data Subject]]  |  [[Automatic SAR Generator]]
  
 
[[Category:Legal_Information]]
 
[[Category:Legal_Information]]
 
[[Category:Bank_Charges]]
 
[[Category:Bank_Charges]]
 
[[Category:Standard_Letters]]
 
[[Category:Standard_Letters]]

Revision as of 01:21, 20 June 2007

Subject Access Request (SAR)

A Subject Access Request (SAR) is a request sent from a data subject to a Data Controller requesting information about themselves.

It is a legal requirement under the Data Protection Act (DPA) for the data controller to comply with this request within a 40 day timescale as outlined in the DPA.

Subject Access Request Example

[your address]


[their address]


[DATE]


Data Protection Act 1998 Subject Access Request



Dear Sir/Madam


ACCOUNT NUMBER: xxxxxxxxx (or multiple numbers if more than one account)


Please supply me with a complete list of transactions and charges relating to my banking history with your organisation. Alternatively, a complete set of statements for that period will be acceptable.

Additionally, where there has been any event in my account history over this period which has required manual intervention by any member of your staff, or any other person, I require disclosure of any indication or notes which have either caused or resulted in that manual intervention, or other evidence of that manual intervention in relation to my banking business with you.

If you are unable to supply this data because there has been no such manual intervention, then please be so kind as to confirm this in your response.

I enclose the statutory maximum fee of £10. You have 40 days in which to comply. Furthermore, if I discover that you have levied disproportionate penalties against me, then I shall be reclaiming them, and also reclaiming the enclosed £10 Data Protection Act subject access request fee.

If there is specific information which you require in order to satisfy yourself as to my identity, please let me know by return. However, please note that the above address is the one which you normally use to communicate my private business to me and which you have hitherto found to be acceptable. I would be happy to collect the Data from my local branch.


Yours faithfully,



[name]


Related Articles

List of all letters | Information Commissioner | Data Controller | Data Subject | Automatic SAR Generator