Typically a letter that a controller would send in response to a data subject’s access rights request at two main stages.

Confirmation of Receipt of Request

“[Name] [Address]

[Date]

Dear [Name of data subject]

Data Protection Subject Access Request – Confirmation of Receipt

Thank you for your letter of [date] making a data subject access request for [subject] exercising the [Data Subject Rights]

This confirms that we have received your request and processing has begun.

We will not need any further information from you at this time or We will need the following additional information from you to be able to complete your request.

Content of this correspondence must not be copied, distributed, modified, reproduced, transmitted, published or otherwise made available in whole or in part without the prior written consent of the controller

 

Sincerely,

 

 

Response to Request

“[Name] [Address]

[Date]

Dear [Name of data subject]

Data Protection Subject Access Request – Confirmation of Receipt

With respect to your letter of [date] making a data subject access request for [subject] exercising the [Data Subject Rights]

Kindly find our response details below

[Response Details]

 

Content of this correspondence must not be copied, distributed, modified, reproduced, transmitted, published or otherwise made available in whole or in part without the prior written consent of the controller

Yours sincerely”