A client asks “what information do you have on me?” That’s a Subject Access Request

Ever had a client ask “what information do you actually have on me?”

That’s called a Subject Access Request (SAR), and it’s a legal right every individual has, meaning as a business, you’re legally required to respond.

It doesn’t need any special wording. A casual message asking what data you hold on someone can count.

You’ve got one calendar month to respond, with limited extensions for complex cases, and it needs to cover more than just handing over a file: what you hold, why, and who you’ve shared it with.

Having a simple process ready means one of these landing in your inbox doesn’t send you into a panic.

If you’re not sure where to start, send me a message.