Form for logging and reviewing Subject Access Requests (SAR's) from data subjects who are requesting a copy of their personal data.

This form is designed for data controllers and can be used to document SAR's and ensure compliance with General Data Protection Regulations (GDPR) and Data Protection regulations.

Form includes 3 sections;

1. Subject Access Request Details; Date received, Data Subject, Request details etc..

2. SAR Review; Authentication / Authorisation of the data subject, review of data held, review of data subject rights.

3. SAR Response: Date sent, overview of personal data provided, how data provided

This document may be useful for information management and compliance with ISO 27001. 

[Information Classification: Confidential]