01 Aug 20263577 words

Subject access request: scope, identity and format

Define the personal information you need without accidentally narrowing away the problem

A subject access request is about your own personal information, not a general demand for every document an organisation holds. Start by listing the events, systems, people, accounts, or date ranges that matter to you. Examples might include a recruitment decision, a customer account, internal correspondence about a complaint, call recordings, or access logs. This helps the organisation perform a reasonable search and gives you a way to check the response. It does not mean you must know the exact file names or databases in advance.

If the organisation asks for clarification, record exactly what it asked and when. ICO guidance says clarification may be appropriate where it is reasonably required to identify the information sought, and the response clock can be paused while clarification is outstanding. You cannot be forced to abandon parts of a request merely because they are inconvenient to search. Reply in writing so there is a clear record of the scope you confirmed.

Handle identity verification proportionately

Prepare only the identification information reasonably needed to show that the requester is the person whose data is sought. If you are contacting an organisation through an authenticated account or another channel that already establishes identity, note that context. If additional ID is requested, ask how it will be used and transmitted securely. The ICO states that the ordinary one-month response period starts once the organisation has the information it reasonably needs to confirm identity.

For a request made on behalf of someone else, keep the authority document separate from the substantive request. The organisation may need evidence that the representative is authorised. Do not send broad identity material to a third party simply because an online template contains a generic passport request.

Build a response inventory instead of reading the disclosure as one large file

When material arrives, create an inventory showing source, date range, format, and any obvious gap. Separate information supplied from explanations about searches, exemptions, redactions, or material said not to be held. If the organisation provides multiple exports, keep their original filenames and avoid merging them until you have checked completeness. A searchable copy can be useful, but preserve the original package.

Pay particular attention to the difference between your personal data and documents. One document may contain data about several people, confidential business information, or material subject to an exemption. A redaction is therefore not automatically evidence of non-compliance. Record the stated reason and the information you expected to receive before deciding whether a follow-up complaint is needed.

Track the current response period accurately

ICO guidance states that organisations normally respond without undue delay and within one month. In certain complex cases, or where there are a number of requests from the same person, the period can be extended by up to a further two months, with notice and reasons. Identity requests, clarification and a permitted fee can affect when the clock runs. Because those details matter, maintain a small timeline rather than calculating the deadline from the date you drafted the first email.

If the response is late or incomplete, send a focused follow-up identifying the missing category or procedural problem. Preserve the original request, acknowledgement, clarification messages and response. If escalation to the ICO is being considered, that file provides a much stronger record than a new complaint that merely says “you did not give me everything.”

Specify format and secure delivery

If a particular usable format matters, say so at the outset where reasonable. For large datasets, structured electronic files may be more useful than screenshots or printouts. For recordings, photographs, or message exports, keep enough metadata to understand the source and date. Do not request insecure delivery of sensitive data merely for convenience. An organisation still has responsibilities around secure disclosure.

Finally, distinguish access from correction, erasure, objection, or a substantive dispute about a decision. A SAR can reveal the data used in a process, but it is not automatically the procedure for overturning that decision. If another right or complaint route is relevant, track it separately so its deadline is not lost while waiting for the access response.

Subject access request: scope, identity and format

This guide answers the real query “Subject access request: scope, identity and format” and connects search intent with procedure, evidence, remedy, service and source control.

2026-08-01 · Subject access request: scope, identity and format

Meaning of the query

For Meaning of the query, isolate the issue addressed here and connect it to the specific record that supports it. “Meaning of the query”, identify the correct document. The query “Subject access request: scope, identity and format” concerns a legal document, so analyse procedure, facts, evidence, remedy and service. Do not copy a solution until it matches the procedural stage, jurisdiction and intended outcome.

The important records include source document, correspondence, official decisions, calculations and delivery proof. The recurring risk is a random form. Link every statement to a date and record; treat an unverified point as a gap rather than an established fact. This produces content usable in a real matter.

At the Meaning of the query stage, verify the relevant record, date and consequence before carrying the point forward. 1 covers recipient, stage and outcome. Record the result, source, verification date and responsible person or body. Where reliable sources differ, resolve the conflict before publication or filing instead of selecting the convenient version.

As a final check for Meaning of the query, compare the draft with the source record and the purpose of Subject access request: scope, identity and format with the file, official instructions and current primary source. Remove repetition, unsupported opinion and material copied from a different form. For “Subject access request: scope, identity and format”, every section must lead to a defined decision or action.

Source records

When reviewing Source records, begin with the exact proposition that needs support. In Subject access request: scope, identity and format, match that proposition to a dated source and distinguish the document itself from an interpretation of it. Review whether the recipient, forum or procedure is the correct one for the issue described. Record the basis for that choice and keep any jurisdictional or procedural uncertainty visible for final checking. The result should be a traceable chain from source to fact to consequence, with unresolved points labelled for verification rather than filled with assumptions.

Authority and procedure

Use Authority and procedure to resolve one concrete part of Subject access request: scope, identity and format rather than repeating the whole file. Identify the controlling document or communication and explain the consequence that follows from it. Check names, dates, amounts and document references against the originals. If two records conflict, preserve both and explain the conflict instead of silently choosing the more convenient version. Record the outcome of that check in the file so later revisions do not reintroduce an unsupported or duplicated proposition.

Chronology

For Chronology in Subject access request: scope, identity and format, build the analysis from the record outward. Fix the date, source and actor first, and only then connect those facts to the practical question addressed in this section. Keep a clear link between every important assertion and its source. Where a source does not prove the full point, narrow the wording or identify the additional record needed to support it. The final check is whether a reader can identify the source, the point proved and the action that follows without searching through unrelated parts of the file.

Grounds

Frame Grounds around the next action required in Subject access request: scope, identity and format. State the factual trigger, the material available to prove it and the practical result sought from this part of the file. Separate primary records from summaries, screenshots and later recollections. Use the strongest available source for the key fact and retain secondary material only where it adds context that the primary record does not contain. That structure reduces repetitive drafting and makes later review faster because each paragraph has a distinct evidential or procedural function.

Remedy

Keep Remedy evidence-led. For Subject access request: scope, identity and format, identify the relevant record, the point it supports and any contradiction or gap that must be resolved before the section can carry a firm conclusion. Before finalising this part, check whether the evidence answers the likely opposing point. If it does not, state the limitation and identify what additional document, explanation or calculation would close the gap. Finish the section with a precise next step and a reference to the material that supports it; do not restate conclusions already established elsewhere in the guide.

Deadlines

Keep Deadlines evidence-led. For Subject access request: scope, identity and format, identify the relevant record, the point it supports and any contradiction or gap that must be resolved before the section can carry a firm conclusion. Test the chronology against delivery records, acknowledgements and later correspondence. A date that cannot be tied to a reliable source should be marked for verification before it is used for a deadline or remedy. If the answer depends on current rules or official instructions, verify the operative version and date separately before relying on the conclusion in a filing or formal notice.

Evidence

Approach Evidence through a short chronology tied to evidence. For Subject access request: scope, identity and format, show what happened, which record proves it and why that record matters to the next procedural or drafting step. Organise supporting material by purpose rather than volume: one item may prove timing, another authority, another performance and another loss. This makes omissions and duplicated assertions easier to detect. That structure reduces repetitive drafting and makes later review faster because each paragraph has a distinct evidential or procedural function.

Calculations

Keep Calculations evidence-led. For Subject access request: scope, identity and format, identify the relevant record, the point it supports and any contradiction or gap that must be resolved before the section can carry a firm conclusion. For any requested outcome, connect the remedy to the facts and documents already identified. Avoid asking for a result that the section has not factually supported, and note any alternative outcome that the record may justify. Record the outcome of that check in the file so later revisions do not reintroduce an unsupported or duplicated proposition.

Recipient

Keep Recipient evidence-led. For Subject access request: scope, identity and format, identify the relevant record, the point it supports and any contradiction or gap that must be resolved before the section can carry a firm conclusion. Review whether the recipient, forum or procedure is the correct one for the issue described. Record the basis for that choice and keep any jurisdictional or procedural uncertainty visible for final checking. The final check is whether a reader can identify the source, the point proved and the action that follows without searching through unrelated parts of the file.

Language

Approach Language through a short chronology tied to evidence. For Subject access request: scope, identity and format, show what happened, which record proves it and why that record matters to the next procedural or drafting step. For any requested outcome, connect the remedy to the facts and documents already identified. Avoid asking for a result that the section has not factually supported, and note any alternative outcome that the record may justify. This keeps the section independently useful while allowing earlier factual findings to be cross-referenced instead of copied into a second paragraph.

Alternative outcomes

When reviewing Alternative outcomes, begin with the exact proposition that needs support. In Subject access request: scope, identity and format, match that proposition to a dated source and distinguish the document itself from an interpretation of it. For any requested outcome, connect the remedy to the facts and documents already identified. Avoid asking for a result that the section has not factually supported, and note any alternative outcome that the record may justify. That structure reduces repetitive drafting and makes later review faster because each paragraph has a distinct evidential or procedural function.

Filing and service

Frame Filing and service around the next action required in Subject access request: scope, identity and format. State the factual trigger, the material available to prove it and the practical result sought from this part of the file. Organise supporting material by purpose rather than volume: one item may prove timing, another authority, another performance and another loss. This makes omissions and duplicated assertions easier to detect. Finish the section with a precise next step and a reference to the material that supports it; do not restate conclusions already established elsewhere in the guide.

Quality control

Use Quality control to resolve one concrete part of Subject access request: scope, identity and format rather than repeating the whole file. Identify the controlling document or communication and explain the consequence that follows from it. Organise supporting material by purpose rather than volume: one item may prove timing, another authority, another performance and another loss. This makes omissions and duplicated assertions easier to detect. The result should be a traceable chain from source to fact to consequence, with unresolved points labelled for verification rather than filled with assumptions.

Privacy

When reviewing Privacy, begin with the exact proposition that needs support. In Subject access request: scope, identity and format, match that proposition to a dated source and distinguish the document itself from an interpretation of it. Before finalising this part, check whether the evidence answers the likely opposing point. If it does not, state the limitation and identify what additional document, explanation or calculation would close the gap. Keep the wording proportionate to what the records prove, and cross-reference another section when the same fact has already been established there.

Curing defects

Treat Curing defects as a separate decision point in Subject access request: scope, identity and format. Start by identifying the event, person or record that makes this part relevant, then state what that material actually establishes. Separate primary records from summaries, screenshots and later recollections. Use the strongest available source for the key fact and retain secondary material only where it adds context that the primary record does not contain. The result should be a traceable chain from source to fact to consequence, with unresolved points labelled for verification rather than filled with assumptions.

The response

Treat The response as a separate decision point in Subject access request: scope, identity and format. Start by identifying the event, person or record that makes this part relevant, then state what that material actually establishes. Check names, dates, amounts and document references against the originals. If two records conflict, preserve both and explain the conflict instead of silently choosing the more convenient version. If the answer depends on current rules or official instructions, verify the operative version and date separately before relying on the conclusion in a filing or formal notice.

Current sources

Approach Current sources through a short chronology tied to evidence. For Subject access request: scope, identity and format, show what happened, which record proves it and why that record matters to the next procedural or drafting step. Before finalising this part, check whether the evidence answers the likely opposing point. If it does not, state the limitation and identify what additional document, explanation or calculation would close the gap. If the answer depends on current rules or official instructions, verify the operative version and date separately before relying on the conclusion in a filing or formal notice.

Next steps

When reviewing Next steps, begin with the exact proposition that needs support. In Subject access request: scope, identity and format, match that proposition to a dated source and distinguish the document itself from an interpretation of it. Separate primary records from summaries, screenshots and later recollections. Use the strongest available source for the key fact and retain secondary material only where it adds context that the primary record does not contain. Record the outcome of that check in the file so later revisions do not reintroduce an unsupported or duplicated proposition.

Individual advice

Treat Individual advice as a separate decision point in Subject access request: scope, identity and format. Start by identifying the event, person or record that makes this part relevant, then state what that material actually establishes. Keep a clear link between every important assertion and its source. Where a source does not prove the full point, narrow the wording or identify the additional record needed to support it. That structure reduces repetitive drafting and makes later review faster because each paragraph has a distinct evidential or procedural function.

Sources for further verification

Informational material only. Check current law, official instructions, jurisdiction and deadlines for the particular matter.

Prepare a document from your own facts and exhibits