Who it's for
- Individuals asking an employer, bank, landlord, retailer or public body for their data
- Small organisations that have received a SAR and need to reply properly
- Anyone preparing for a dispute where the other side holds records about them
What's included
- About this template — your right of access, the response deadline, identity checks and exemptions
- Document 1 — SAR letter: your details and a table of what you are asking for — the data, purposes, legal basis, recipients, retention, source and automated decisions
- Document 2 — SAR response: disclosing in full, withholding under an exemption, extending the deadline, and the requester's rights
Save with a bundle: get this plus 5 more documents in the GDPR + Data Protection Compliance Pack for £39.99.
See what's in the bundle →Key points covered
- Free of charge in most cases
- Organisations must respond within one calendar month, extendable by two months for complex requests
- Organisations need only make reasonable and proportionate searches, and the clock pauses while they wait for a genuine clarification
- Reasonable proof of identity may be requested
- Withheld information should be identified with the exemption relied on
- Complaints can go to the organisation, then the ICO
DocPilot templates are drafted from current legislation and official guidance (GOV.UK, legislation.gov.uk and the relevant regulators), checked against those sources and fully re-reviewed every six months. They are not legal advice. How we make our documents →
Read the guide
Related documents
Complaint Letter Pack£16.99 · See what's included →Data Breach Notification Letter Pack£12.99 · See what's included →Privacy Policy (UK GDPR)£12.99 · See what's included →
Questions
How long does an organisation have to reply?
One calendar month from receiving the request, which can be extended by up to two further months for complex or numerous requests.
Can they charge me?
Usually not. A fee is only possible in limited cases, such as manifestly unfounded or excessive requests.
I am a business that received a SAR. Does this help?
Yes. Document 2 is a response template with sections for full disclosure, exemptions and extensions.
Is it in a bundle?
Yes. It is in the Debt and Consumer Bundle and the GDPR + Data Protection Compliance Pack.
Subject Access Request Letter
£7.99 · Word + PDF · instant download
Buy — £7.99 →Bought the wrong document by genuine mistake? Our Swap or Refund Promise lets you swap it or get a refund within 14 days.