Subject access request: checklist
Is it a subject access request?
Handle as part of your normal course of business.
Any written request by an individual asking for their personal information is a subject access request. You can choose to deal with it in one of two ways: as a routine enquiry, or more formally.
If you can, treat requests that are easily dealt with as routine matters, in the normal course of business; for example:
The following are more likely to be treated formally:
For more guidance, see our subject access code of practice (pdf).