Subject Access Requests (SAR)
-
The main SARs guidance has been updated following the Data (Use and Access) Act. The bitesize guides on this page are under review and may be subject to change.
If you’re running a small business, group or charity, you’ve probably got information about people stored as contacts on your phone or computer, or in notes or other documents.
By law, people can ask you for a copy of any information that’s to do with them. It might be saved on your system, but if it’s about them, it’s their personal data, and they have a right to see it. If they ask you for a copy of it, by phone, in person, or in writing, they have made a ‘subject access request’ (SAR), and you need to take action.