This letter requests further time to feal with a subject access request. The reason for the extension is due to the complex nature of the information requested.

This letter can be sent to a data subject who has requested that incorrect data in relation to them is rectified. This letter requests further information on the data to permit the employer to complete the request.

This letter can be sent to a data subject to inform them that their request to have data that was incorrect rectified is complete

The employer is not normally permitted to charge a fee for a SARS request. However, if the request is manifestly unfounded or repetitive they may charge a fee.

This letter can be sent to a data subject where the employer perceives the request to be unfounded or excessive. The letter r provides options for the employer to explain their rationale.

This letter is responding to a subject access request informing the data subject that the employer will comply with the request however, as the request is complex the employer will need more time.

This letter is responding to a subject access request informing the data subject that the employer will comply with the request however, as the request is complex the employer will need more information.

This letter responds to a subject access request and provides a copy of the information that is held and also lets the data subject know how it is processed

This data protection retention schedule outlines the duration for which varying categories of personal data will be held, the purpose of the processing, the format by which it is stored and the legal basis for processing this data.

This policy outlines how an organisation deals personal data and explains the organisation’s approach to making a subject access request, and how the organisation ensures compliance with General Data Protection Regulation (GDPR) in relation to the handling of personal data in this regard.

This privacy notice should be given to all employees. It outlines how and why the organisation collects and processes personal data relating to employees medical records data in line with GDPR and the Data Protection Act 2018.

This privacy notice should be available to all contractors. This policy outlines how the organisation will collect and process an applicants data in line with GDPR and the Data Protection Act 2018.

This policy sets out the organisation’s approach to processing special category personal data and criminal records data. It supplements the organisation’s data protection policy.

This policy outlines the employers responsibilities in dealing with Data in the workplace in line with GDPR and the Data Protection Act 2018.