Subject Access Request Policy Template – Employee-Facing

A new Short Form Subject Access Request Policy for Employees is now available, in addition to the Subject Access Request Form and a variety of letters that can be used by the employer to respond to different subject access request scenarios. 

This SAR Policy (Employees) is designed for use as an internal employee-facing document, setting out the right of access under the UK GDPR and explaining how employees can make a subject access request (SAR) to find out what personal data you are holding about them and how you are processing it.

Background

The UK GDPR sets out key rights for individuals, including the “right of access”. Transparency is a central element in modern data protection law and this right plays a central role in ensuring such transparency.

The right of access gives individuals the right to find out what personal data your organisation holds about them, what you are doing with that data, and why. They also have the right to obtain a copy of their personal data from you. This is achieved by means of a ‘data subject access request’.