Subject Access Request Form Template for England and Wales

Create a bespoke document in minutes,  or upload and review your own.

4.6 / 5
4.8 / 5

Let's create your Subject Access Request Form

Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.

Get your first 2 documents free

Your data doesn't train Genie's AI

You keep IP ownership of your information

Key Requirements PROMPT example:

Subject Access Request Form

"I need a Subject Access Request Form for our healthcare organization that includes specific sections for requesting medical records and a robust identity verification process, ensuring compliance with both UK GDPR and additional healthcare data protection requirements."

Document background
The Subject Access Request Form is a critical document used in England and Wales to facilitate compliance with data protection legislation. It enables individuals to exercise their fundamental right to access personal data under the UK GDPR and Data Protection Act 2018. Organizations use this form to streamline the process of handling subject access requests, ensure all necessary information is collected, and maintain consistency in their response procedure. The form typically includes sections for personal identification, specific data requested, and preferred format of response.
Suggested Sections

1. Personal Details: Section for data subject's full name, contact details, and any reference numbers

2. Identity Verification: Section detailing required proof of identity documents and verification process

3. Request Details: Details of the specific information being requested and relevant time period

4. Format Preference: Section specifying preferred method of receiving the requested information

Optional Sections

1. Third Party Authorization: Section to be included when someone is making a request on behalf of another person

2. Specific Department Selection: Optional section for large organizations where request needs to be directed to specific departments

3. Previous Correspondence: Section for referencing any previous communication about this matter

Suggested Schedules

1. Identity Verification Guide: Schedule containing list of acceptable identity documents and requirements

2. Privacy Notice: Schedule detailing how the provided personal data will be processed

3. Third Party Authorization Form: Template form for authorizing another person to make the request

Authors

Alex Denne

Head of Growth (Open Source Law) @ Genie AI | 3 x UCL-Certified in Contract Law & Drafting | 4+ Years Managing 1M+ Legal Documents | Serial Founder & Legal AI Author

Relevant Industries
Relevant Teams
Relevant Roles
Industries

UK GDPR: Primary legislation governing data protection in the UK post-Brexit, setting out fundamental rights of data subjects and obligations of data controllers

Data Protection Act 2018: UK's implementation of data protection legislation that works alongside and supplements the UK GDPR

ICO SAR Guidance: Official guidance from the Information Commissioner's Office on how to handle Subject Access Requests

Time Limit Requirement: Legal requirement to respond to SARs within one month of receipt under normal circumstances

Identification Requirements: Legal obligation to verify the identity of the person making the SAR before disclosing personal data

Response Format: Requirements regarding the format in which personal data should be provided to the data subject

SAR Exemptions: Legal exemptions and restrictions that may limit the scope of information provided in response to a SAR

Fee Regulations: Rules regarding charging fees for SARs - generally free, but reasonable fees permitted for excessive or repetitive requests

Data Subject Rights: Fundamental rights of data subjects under UK GDPR including right of access, rectification, erasure, and data portability

Valid Request Requirements: Legal requirements for what constitutes a valid SAR, including format and necessary information to be provided by the requester

Teams

Employer, Employee, Start Date, Job Title, Department, Location, Probationary Period, Notice Period, Salary, Overtime, Vacation Pay, Statutory Holidays, Benefits, Bonus, Expenses, Working Hours, Rest Breaks,  Leaves of Absence, Confidentiality, Intellectual Property, Non-Solicitation, Non-Competition, Code of Conduct, Termination,  Severance Pay, Governing Law, Entire Agreemen

Find the exact document you need

Data Subject Rights Request Form

find out more

Data Subject Access Request Form GDPR

find out more

Data Protection Request Form

find out more

Subject Access Request Form

A standardized form under English and Welsh law enabling individuals to request access to their personal data held by organizations.

find out more

Dsar Form

A standardized form under English and Welsh law for individuals to request access to their personal data held by organizations, as per UK GDPR requirements.

find out more

Data Subject Access Request Form

A standardized form under English and Welsh law enabling individuals to request access to their personal data held by organizations.

find out more

Download our whitepaper on the future of AI in Legal

By providing your email address you are consenting to our Privacy Notice.
Thank you for downloading our whitepaper. This should arrive in your inbox shortly. In the meantime, why not jump straight to a section that interests you here: https://www.genieai.co/our-research
Oops! Something went wrong while submitting the form.

Genie’s Security Promise

Genie is the safest place to draft. Here’s how we prioritise your privacy and security.

Your documents are private:

We do not train on your data; Genie’s AI improves independently

All data stored on Genie is private to your organisation

Your documents are protected:

Your documents are protected by ultra-secure 256-bit encryption

Our bank-grade security infrastructure undergoes regular external audits

We are ISO27001 certified, so your data is secure

Organizational security

You retain IP ownership of your documents

You have full control over your data and who gets to see it

Innovation in privacy:

Genie partnered with the Computational Privacy Department at Imperial College London

Together, we ran a £1 million research project on privacy and anonymity in legal contracts

Want to know more?

Visit our Trust Centre for more details and real-time security updates.