Data Access Request Generator

[Your name]

18 August 2026

To: The Data Protection Officer / Data Protection Contact
[Organisation name]

Re: Data access request under Article 15 GDPR

Dear Sir or Madam,

I am making a data access request under Article 15 of the General Data Protection Regulation and the Data Protection Act 2018.

Please provide me with:
1. Confirmation of whether you process personal data relating to me;
2. A copy of all personal data relating to me that you hold, in a commonly used electronic form;
3. The purposes of the processing and the lawful bases relied on;
4. The categories of personal data concerned;
5. The recipients or categories of recipients to whom my data has been or will be disclosed;
6. The envisaged retention period, or the criteria used to determine it;
7. Where any data was not collected from me, all available information as to its source; and
8. Details of any automated decision-making, including profiling, applied to me.

If you require information to verify my identity, please tell me promptly what is required, bearing in mind that any verification must be proportionate. If you consider any part of this request to fall within an exemption, please identify the material withheld and the specific exemption relied on.

I look forward to your response within one month of receipt, as required by Article 12(3) GDPR. If you intend to rely on an extension for complexity, please notify me of this, with reasons, within that first month.

Yours faithfully,

[Your name]