Your browser does not support JavaScript
Full Management Data access and privacy pack

Subject Access Request (SAR) Checklist form

✓ Click here to get more implementation support, update alerts and more from our partner site, hrdocbox.co.uk.

£ 9
Get much more with our
Data access and privacy template toolkit:
£25

A checklist to ensure that all necessary steps are followed when handling a SAR, from initial receipt through to response and closure.

Reading time
How long to understand and implement this form?
5 mins
Word count
How many words in this form?
324
We also have budget-friendly bundles featuring this template:

What is a Subject Access Request (SAR) Checklist form?

The purpose of this Subject Access Request (SAR) Checklist form is to provide you with a flexible and customisable document to serve as a robust and effective starting point for you.

By using our Subject Access Request (SAR) Checklist form, you can streamline your process, maintain consistency and accuracy, and save time, and it can be easily adapted to fit your specific scenario.

Applicable legal jurisdiction
In which jurisdiction can this form be used?
Great Britain & NI (United Kingdom)

Subject Access Request (SAR) Checklist

1. Receipt of SAR:

SAR received from individual (in writing or verbally).

Date of receipt recorded.

2. Verify Identity:

Verify the identity of the individual making the SAR.

Request additional information or documentation if necessary.

3. Acknowledge Receipt:

Send acknowledgment letter to the individual confirming receipt of SAR.

Provide estimated timeline for response.

4. Assess Validity of SAR:

Review the SAR to ensure it is valid and includes necessary information.

Determine whether any exemptions or limitations apply.

5. Conduct Data Search:

Conduct thorough search for the requested personal data across all relevant systems, databases, and paper records.

Document the search process, including sources searched and any challenges encountered.

6. Review and Redact Data:

Review personal data found to ensure relevance to the SAR.

Apply appropriate redactions to remove any third-party personal data or confidential information.

7. Prepare Response:

Prepare response letter to the individual providing access to the requested personal data.

Include details of any exemptions applied, legal basis for processing, and instructions for accessing the data.

8. Provide Response:

Provide response to the individual within one month of receipt of SAR, unless an extension is necessary.

Send response electronically or by post, depending on individual's preference.

9. Record-Keeping:

Maintain accurate records of SARs received, actions taken, and responses provided.

Store records securely and in accordance with data protection laws.

10. Review and Follow-Up:

Review SAR process periodically to identify areas for improvement.

Address any feedback or complaints received from individuals regarding SAR handling.

Version: [1.0]

Issue date: [date]

This is a preview. Access to the remainder requires a purchase.
subject access request (sar) checklist form