Data subject access request: employer's initial response (UK)

by Practical Law Employment

A standard document that provides a template letter for an employer's initial response to a data subject access request (SAR or DSAR) from an employee, worker, contractor, or job applicant. This letter is designed to help employers acknowledge receipt of a request and manage their initial obligations under Article 15 of the retained EU law version of the General Data Protection Regulation ((EU) 2016/679) (UK GDPR). The letter offers several drafting options depending on the circumstances, including confirming the response time. It provides framework language for situations where the employer processes a large amount of information and needs the individual to clarify their request, or where the request is complex and requires an extended response time. The letter is a practical tool for ensuring timely and compliant communication at the outset of the request process and includes integrated drafting notes explaining key considerations such as identity verification and response times.