Understanding Subject Access Requests

The ICO's Job

The Information Commissioner’s Office (ICO) is all about making sure data protection and information rights laws are followed. They help out with advice on how to handle personal data, look into complaints, and keep track of organizations that deal with personal info.

What's a SAR?

According to the ICO, “The right of access, commonly referred to as a subject access request (SAR), allows someone to get a copy of their personal info from your organization. This includes where you got their info from, what you’re using it for, and who you’re sharing it with.”

People, like current or former employees, often use SARs to check out things like performance reviews, disciplinary records, and related emails, especially if there’s a dispute.

How to Make a Formal Request

• SARs can be made verbally, in writing, or even on social media.

• You don’t need any special wording for a SAR to be valid, so requests can be sent to any department or person in your organization.