Learning
Data Protection
The SAR, and the rights around it.
A subject access request gets you a copy of the personal data an organisation holds about you, usually within one month and usually free. You do not have to give a reason.
You also have rights to rectification, erasure in some circumstances, restriction, objection, and to challenge purely automated decisions.
If they fail to respond properly, you can complain to the Information Commissioner's Office.
Key points
- Use the phrase 'subject access request' explicitly.
- One month deadline, extendable in complex cases.
- Ask for internal notes, call recordings and system logs by name.
- Body-worn video retention is short — request fast.
You’re safe. You’re capable. You’re legally unstoppable.