Template:AccessUK

Dear ,

This is a subject access request under the Data Protection Act 2018, as amended to link to the UK GDPR.

• • Please note that it is not legal to require data subjects to use an in-house form**. (see for instance UK Information Commissioner’s Office, ‘Subject Access Code of Practice’ (9 June 2017) p 13; Information Commissioner’s Office, ‘Guide to the GDPR: Right to access’ (22 May 2019), stating that 'even if you have a form, you should note that a subject access request is valid if it is submitted by any means, so you will still need to comply with any requests you receive in a letter, a standard email or verbally [..] although you may invite individuals to use a form, you must make it clear that it is not compulsory')

In the context of the very recently announced data breach, I would like to: - request a copy of all my personal data held and/or undergoing processing (UK GDPR Art 15 1); - request any available information about which of this data has been breached (UK GDPR Art 15 1); - request information about the sources for this data (UK GDPR Art 15 1 g); - request information about the recipients or categories of recipients for this data (UK GDPR Art 15 1 c); - request information about the recipients for this data in third countries (UK GDPR Art 15 1 c).

In accordance with the law, I look forward to hearing from you within one month of receipt.

Regards,

<< FIRST_NAME LAST_NAME >>

Template documentation