Most of us hand over personal information every day.
We share our names, addresses, email accounts, payment details, health information and more with organisations we trust to handle it properly.
But have you ever wondered exactly what information a company holds about you? Or what you can do if you think your data has been misused?
That’s where a Subject Access Request (SAR) can help.
We’ve published a new guide explaining what a SAR is, how it works, and the steps you can take to access your personal information.
What is a Subject Access Request?
A Subject Access Request is a legal right that allows you to ask an organisation whether it holds personal data about you and, in most cases, obtain a copy of that information.
It can help you understand:
- What personal information an organisation holds
- How your data is being used
- Who it has been shared with
- How long it will be kept
- Whether decisions about you are being made automatically.
Importantly, you do not need to explain why you are making the request.
Why might you make a SAR?
People use SARs for many different reasons. You might want to:
- Check what information a company holds about you
- Verify that your records are accurate
- Understand how your data is being used
- Find out more after a suspected data breach
- Gather information before making a complaint
- Understand what evidence exists relating to a dispute or account
A SAR is one of the most powerful tools available to consumers who want greater transparency about their personal data.
What does the guide cover?
Our guide explains:
- How to make a Subject Access Request
- What information organisations must provide
- How long organisations have to respond
- Whether a SAR costs anything
- When a SAR can be refused
- What to do if an organisation ignores your request
- How SARs can help following a data breach.
We’ve also included two free templates that you can adapt for your own situation.
Why this matters
Data breaches continue to affect millions of people every year.
If your information has been exposed, understanding exactly what happened and what data was involved can be an important first step in deciding what to do next.
While a SAR does not automatically mean you have a legal claim, it can help you gather information, understand the situation and make informed decisions about your rights.
Know your rights
Today, when personal information is used and shared across numerous platforms, SARs help people protect their privacy rights, maintain control over their personal data, ensure its accuracy, and understand how it is being used.
Likewise, following a data hack or breach, SARs can provide valuable insights into the extent of the exposure, the types of data affected, and any corrective actions taken by the organisation.
If you want to understand what personal information organisations hold about you, our Subject Access Request guide explains everything you need to know in plain English.
Read the guide and access the free templates to help you get started.
