Have you received a bit of direct marketing that you didn’t give your consent to receive? Or do you just want to know what personal data an organisation holds relating to you? Send the below example email to the relevant person the organisation to invoke your Right Of Access:

[Name and address of the organisation]

Dear Sir or Madam

Subject access request

[Your full name and address and any other details to help identify you and the data you want.]

Please supply the data about me that I am entitled to under data protection law relating to: [give specific details of the data you want, for example:

  • Your organisations legal basis for marketing to me 
  • Where you acquired my personal data
  • my personnel file]

If you need any more data from me, or a fee, please let me know as soon as possible. It may be helpful for you to know that data protection law requires you to respond to a request for data within one calendar month.

If you do not normally deal with these requests, please pass this letter to your Data Protection Officer, or relevant staff member. If you need advice on dealing with this request, the Information Commissioner’s Office can assist you. Its website is ico.org.uk or it can be contacted on 0303 123 1113.

Yours faithfully

[Signature]

 

Note; it is a legal requirement for EU organisations to provide this information if requested. For more information and instruction on your rights, please visit the ICO website: https://ico.org.uk/your-data-matters/your-right-of-access/.