Response to data subject request—right of access—able to comply with request

The following Risk & Compliance precedent provides comprehensive and up to date legal information covering:

  • Response to data subject request—right of access—able to comply with request

Response to data subject request—right of access—able to comply with request

[Name of individual making request]

[Address of individual making request]

[Date of this response]

Dear [insert name of individual making request]

I am writing in response to your request dated [insert date of request].

You will recall you asked for [confirm precisely what was requested, eg ‘electronic copies of any personal data we hold about you’].

I confirm that we are processing [that] personal data relating to you and a copy of the relevant information is [insert details of how personal data is being provided to the data subject, eg enclosed with this letter].

[As your request was made electronically, we are providing the information to you [insert details of format in which the information is being provided—this must be a commonly used electronic format].]

You are also entitled to receive the following information:

  1. the purposes of the processing of your personal data;

  2. the categories of personal data concerned;

  3. the people and organisations or categories of person or organisation to whom your personal data has been, or will be, disclosed;

  4. where possible, the time period for which we envisage storing your personal data, or, if that is not possible, the criteria we use to decide how long to store your personal data for;

  5. where the personal data is not collected from you directly, any available information as to where it comes from;

Popular documents