Subject access request letter

The letter

[date]

Dear [who you are writing to],

Subject access request

I am making a subject access request under Article 15 of the UK GDPR for a copy of the personal data you hold about me.

I would like to receive the information electronically.

Please also confirm the purposes for which the data is processed, who it has been shared with, and how long you intend to keep it.

I understand you must respond within one month of receiving this request, and that there is no fee.

Yours sincerely,

[your name]

Nothing you type is stored or sent anywhere. Fill it in, take the text, close the page.

What happens next

The deadline is one month, extendable by two further months only for complex requests, and they must tell you if they extend.
There is no fee unless the request is manifestly unfounded or excessive.
If they do not respond, you can complain to the Information Commissioner’s Office.

This letter rests on UK GDPR, Article 15. It is a starting point, not legal advice — change anything that does not fit your situation.

Nathan Cole

I write the guides on HoursHQ and check every statutory figure against GOV.UK, Acas and the legislation itself before it goes live. Where the law is genuinely unclear, I say so rather than guessing.