You are here:
Subject access requests: guidance and template forms
Individuals have the right to request access to the information you and your schools hold about them under the UK GDPR. Use this guidance and our template forms to help you comply with subject access requests and know when you can refuse them.
This article is based on:
- The 'right of access' section in the guide to the UK General Data Protection Regulation (UK GDPR) published by the Information Commissioner's Office (ICO)
- Advice from Forbes Solicitors
What are subject access requests?
This allows them to be aware of, and verify the lawfulness of, you processing this data.
How soon must we comply with a request? You must comply as soon as you can, at the latest within 1 month of receiving: The request, or Any information you request to confirm the identity of the person making the request A fee (only in certain circumstances - see below) If the request is complex or
The Key has taken great care in publishing this article. However, some of the article's content and information may come from or link to third party sources whose quality, relevance, accuracy, completeness, currency and reliability we do not guarantee. Accordingly, we will not be held liable for any use of or reliance placed on this article's content or the links or downloads it provides. This article may contain information sourced from public sector bodies and licensed under the Open Government Licence v3.0.