Personal data & individual rights
Data rights & Subject Access Requests
Use this hub when the issue is personal information held about you: getting a copy, correcting it, asking for erasure or restriction, challenging a response or making a data-protection complaint.
Start with access
Subject Access Requests (SAR / DSAR)What the right of access covers, how to make a request and what a compliant response should contain.SAR deadlinesCalculate one calendar month correctly and understand ID, clarification and extensions.SARs at workEmployment records, emails, HR notes, third-party information and reasonable searches.
Other data-protection rights
When something has gone wrong
No response or an incomplete responseCheck the deadline, keep evidence and complain to the organisation.SAR refused or information withheldExemptions, third-party data and manifestly unfounded or excessive requests.ID, clarification and the clockSeparate rules for when the timescale starts and when it can genuinely pause.