Help centre / Your account, billing and support
Answer a subject access request
Record when someone asks for their data, download everything you hold about them, and answer on time.
Anyone can ask for the personal data you hold about them.
More detail
You must answer within one calendar month of the day it arrived. See UK GDPR, Article 12A.
Record the request
-
Step 1: Open the person's record, and choose Subject access requests from its menu.
-
Step 2: Choose The day it arrived, and add a Note if you like.
-
Step 3: Press Record the request.
More detail
The deadline shows straight away.
Send the answer
-
Step 1: Press Download everything we hold.
More detail
We email you when it is ready.
-
Step 2: Take out anything about other people before you send it.
-
Step 3: Send it to the person.
-
Step 4: Press Mark as answered.
More detail
If it is complex, you can take two months more. Say why under Needs longer? Say why and press Take two months more. Tell the person why within the first month.
Stuck?
I can't see Subject access requests
Only an owner or an HR administrator handles them. Ask one of them.
It isn't on my own record
Someone else must handle a request about your own record.
It says choose the day it arrived
The day must be today or earlier.
It says an extension must be told within the first month
The first month has passed, so it is too late to take longer. Answer as soon as you can.
Thanks. That helps us make the guides better.
Not legal advice. Checked against the law on 1 November 2026; we check it again by 1 May 2027, and sooner if the law changes.