subject access request

STANTHEGANDER

hello im just wondering if this letter is still valid and is the fee of £10 still the same ?thanks
This SAR was kindly supplied by Incipience.

DATA PROTECTION ACT 1998
SUBJECT ACCESS REQUEST

Date: xx:xx:xxxx

Dear Sir/Madam
Name xxxxxxxxxxxx
Account No’sXXXXXXXXXXXXXXXXXX


I understand that you currently hold details of my personal and financial information within your internal record systems with regard to personal loan accounts and credit cards accounts

I would be grateful if you would provide the following for ALL accounts or associated accounts I hold or have held with your organisation:
Full copies of all contracts which you believe exist or have existed between myself and your organisation, including true copies of any documents you hold in support of the same.
A complete list of all transactions or statements relating to ALL of my Loan Accounts with your organisation.
Copies of all documents which include any of my personal information including copies of any contacts or invoices, emails or computer records containing my personal information, or any records which pertain to this information.
Full copies or transcripts of any correspondence in postal, email or any other format which you have entered into with any individual, organization or third party which contains my personal or financial, or which pertains to me.
Where any previous information or records held have been deleted or disposed of, the methods used to do so, including dates, certificates or references confirming details of destruction. Where you are unable to provide such certificates, please provide a declaration, signed by an authorised officer of your company, confirming the dates and methods of destruction of this data.
Full hard copy print outs of my personal or financial information, held in a digital, magnetic or any other format which is held in any archives, backups or other storage devices / locations.
Underwriting sheet or other such document recording any commission (or other) payment made to an intermediary or packager, and/or payment/commission from the insurer in relation to my account.
Where you have used abbreviations and/or codes, I would request that an accompanying sheet be provided so as to translate these abbreviations and/or codes and their meanings, I also request an accompanying appendices of the documents included and reference to the purpose or meaning to those documents.

I request that you provide all the information requested above, even though you may consider that it falls outside Data Protection.

I reserve the right to refer to the contents of this letter if an application for pre-action discovery is necessary relating to any of the documents requested herein.

I enclose a cheque in the sum of £10 to cover your fee.

IF YOU ARE UNABLE TO DEAL WITH THIS REQUEST, YOU SHOULD IMMEDIALTELY FORWARD IT TO THE PERSON WITHIN YOUR ORGANISATION RESPONSIBLE FOR DATA PROTECTION.

I look forward to hearing from you in the first instance of receipt.

Your Faithfully.

.................................................. .................................................. .......................
Details of:
SAR (SUBJECT ACCESS REQUEST)




For anyone requesting a Subject Access Request (SAR), they have 40 days to comply and send you all the information they have on you on your accounts.

£10 cheque payment or postal order is required.

Always post by recorded delivery.

When you receive the SAR, you should receive all that is requested within the template, if in doubt just post up here where someone will be able to confirm what is what.

You will or should receive all information going back as far as 6 years, you may be lucky to receive information going back even further, every company varies from one to the other.

Write again to the company if you believe they have not given everything requested, they should write back within a short time and confirm if that is everything they do have on you and your account(s) with them.

You do not always receive recorded discs, however phone calls made Jan 2005 after may have been recorded, where they may then supply the recordings, but otherwise you should receive transcripts of dates, times etc of when calls were made and the reasons for the phone calls.

If there were a joint loan taken out, and you both require details, most companies will want 2 payments of £10 x 2 = £20 cheque or postal order and require 2 signatures, check this with the company concerned to save on time and any come backs.

Again if you feel let down you can always contact the Information commissioners Office, known as the ICO who will be able to direct you here, here is the ICO website for your interest, check this out, as more information will be within their website.
http://www.ico.gov.uk/for_the_public.aspx

Ed-1

STANTHEGANDER wrote: »

hello im just wondering if this letter is still valid and is the fee of £10 still the same ?thanks
This SAR was kindly supplied by Incipience.

Under the General Data Protection Regulation (GDPR) the fee of £10 no longer applies. The period of 40 days for a response is also now cut to 30 days.

STANTHEGANDER

Hi I dont actually know the account numbers this is what i am fishing for , do i just leave where it says account numbers blank?
thanks

[Deleted User]

Just write a simple letter asking for the data they hold about you.

agrinnall

Ed-1 wrote: »

The period of 40 days for a response is also now cut to 30 days.

It's actually 1 month.


https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/right-of-access/
How long do we have to comply?

You must act on the subject access request without undue delay and at the latest within one month of receipt.
You should calculate the time limit from the day after you receive the request (whether the day after is a working day or not) until the corresponding calendar date in the next month.

STANTHEGANDER

can i send them a simple letter asking for only account numbers and to check all products for ppi? i dont really need want all statements ect.thanks

agrinnall

You can ask but they may simply produce whatever is easiest for them, which could be all data, as long as it includes what you've asked for.

dunstonh

You are only required to write one sentence in the request. You don't need a letter of gobbledygook from the Monty Python school of legal speak

STANTHEGANDER

ok i'll try and figure out what brian would ask for .

agrinnall

The ICO have a letter template which includes some paragraphs on how the request should be responded to. I sent one recently but excluded the part about a fee, why put ideas into their heads?



https://ico.org.uk/your-data-matters/your-right-of-access/