Helping you find our subject access request (SAR) resources

A quick reference guide to help you find the content you need on each topic.

What you need to do or consider		Where you can find it
Where do we begin with SARs?		Right of access at a glance
Explainer Video		Two minutes on subject access requests
Blog: SARs – Getting the basics right		Subject Access Requests: Getting the basics right
Detailed SAR Guidance		Right of access (detailed guidance)
How do we deal with a SAR?		How to deal with a request for information: a step-by-step guide (for small organisations)
SARs Q&A		Subject access requests -FAQs for small businesses Subject access request Q and As for employers
SAR Tips		Four simple ways to make your next subject access request easier to handle
Records Management, storage and SARs		Storage limitation Information Management Systems How long should we store data?

Specific Subject Access Request questions

Some common subject access request (SAR) questions are answered with links to relevant web pages.

Certain sectors have different exemptions around subject access requests that take various circumstances into account. A good introduction to this can be found in our section Are there any special cases?

See also our A guide to the data protection exemptions section which lists various exemptions that organisations may rely upon when dealing with SARs, depending on the field that the organisation works in.

Our section in the detailed SAR guidance also highlights where specific exemptions may apply in What other exemptions are there?

What you need to do or consider		Where you can find it
How would you interpret 'carry out reasonable searches' in the context of a SAR?		How do we find and retrieve the relevant information? What about information contained in emails?
When can we extend deadlines to respond?		Can we extend the time for a response? Timely Responses – Accountability framework
When is a request excessive or unfounded?		Manifestly unfounded and excessive requests What does manifestly unfounded mean? Subject access request Q and As for employers When can we withhold information? Can we clarify a request?
What do we do if the information requested in the SAR contains someone else's information?		What should we do if some of the data we’re looking to provide when responding to a subject access request contains someone else’s personal data?
Can we disclose information about other people in the fields of health, education or social work?		What should we do if the request involves information about other individuals?
Are there special SAR considerations for the health sector?		Health data
Are there special SAR considerations for the social work sector?		Social work data
Are there special SAR considerations for the education sector?		Education data Accessing pupils' information Findings from ICO reviews of subject access request handling within educational establishments
What do we need to consider regarding CCTV and SARs?		CCTV governance and Information disclosures