Data subject access request: letter from employee making a request (UK)

by Practical Law Employment

A standard document that provides a template letter for an individual to make a data subject access request (SAR or DSAR) to an employer or former employer. This letter is drafted in accordance with Article 15 of the UK General Data Protection Regulation (UK GDPR) and can be adapted by employees, workers, contractors, and job applicants. This letter, which helps individuals exercise their right of access to personal data held by an employer, includes sections for defining the scope of the request, suggesting search parameters to help locate the data, and listing variant names or nicknames to ensure a thorough search. It also formally requests the supplementary information an organisation must provide under the UK GDPR, such as the purposes of processing, data categories, and details of any automated decision-making. The letter has accompanying drafting notes which explain the legal rights and the employer's corresponding duties, including response timelines and handling requests that may be considered manifestly unfounded or excessive.