Subject / Data Access Requests

Under Article 15 of the GDPR, individuals have a right to obtain a copy of any information relating to them kept on computer or in a structured manual filing system or intended for such a system by any organisation.

All the individual needs to do is write to the organisation and request, under the GDPR, a copy of the personal data it holds in relation to them.

All organisations are obliged to reply within one month of such a request. Our Data Protection consultants can work with your team to help implement and run systems for managing and responding to these requests.