People have the right to a copy of the personal data stored on them.
This copy can be either in writing or a digital version.

If it is sent as a file, the file must be able to be opened by commonly available software and be readable by a human.
‘A data subject should have the right of access to personal data which has been collected about him or her, and to exercise that right easily and at reasonable intervals, in order to be aware of, and verify, the lawfulness of the processing’.
You have 30 days in which to respond to a subject action request.

Request a free, no obligation meeting

GDPR subject action request

There could be quite a lot of information you need to compile in a subject action request. As well as supplying the reason for processing, and the categories of personal data collected and stored. You should also provide details about:


It is important to ask for proof of identity from the person requesting the information to make sure you are sending the correct information to the right person otherwise you will be in breach of GDPR!

For more information and a free no obligation meeting to discuss your requirements, contact us