Right to Know Request Builder

Generate a Subject Access Request under UK GDPR to find out what data organisations hold about you

Your data is processed entirely in your browser — nothing is uploaded or stored on any server.

Your Details

Your Full Name

Your Email

Your Address

Date of Birth (helps ID you)15 March 1985">

Organisation Details

Organisation Name

Type

What Data Do You Want?

Select categories (check all that apply)

All personal data held Emails mentioning me HR/personnel records CCTV footage Automated decisions about me Who my data is shared with

Additional specific data requested (optional)

Generated Letter

Fill in the form above and click "Generate SAR Letter"...

What Is a Subject Access Request?

Under Article 15 of the UK GDPR, you have the right to obtain a copy of your personal data from any organisation that processes it. This is called a Subject Access Request (SAR). Organisations must respond within one calendar month and cannot charge a fee in most cases.

Who Can You Send a SAR To?

Any organisation that holds your personal data — employers, councils, NHS trusts, banks, insurers, social media companies, online retailers, landlords, schools, and more. Unlike FOI requests (which only cover public bodies), SARs apply to any data controller.

What Must They Provide?

They must confirm whether they process your data, provide a copy of that data, explain the purposes of processing, who it has been shared with, the retention period, and your rights to rectification or erasure. For automated decisions, they must explain the logic involved.