GDPR Data Subject Access Request (DSAR) Letter
Write a subject access request under Article 15 GDPR / UK GDPR asking a company for a copy of all the personal data it holds about you — with the information they must include and the one-month deadline.
For general information only — not legal advice. Laws vary by location; consult a qualified lawyer.
How to use
- 1Enter your details and the company.
- 2Add anything that helps them find your data (account ID, email addresses used).
- 3Send it to their data protection officer and note the date — they have one month to reply.
Frequently asked questions
Is this subject access request legally binding?
A document like this is binding when the parties agree to it (and sign where required). Whether each clause is enforceable depends on your local law, so have important agreements reviewed by a lawyer.
How long does the company have to reply?
One month from receipt, extendable by two more months for complex requests (they must tell you within the first month).
Can they charge a fee?
Not normally. They can charge a reasonable fee only if the request is manifestly unfounded or excessive, or for extra copies.
Is my information stored?
No. The document is generated in your browser and nothing you type is sent to our servers.