Subject access request

Under the General Data Protection Regulation, clients have the right to access the information that their creditors hold about them by making a ‘subject access request’. No particular form of words is required so long as the client makes clear that they are asking for details of their personal data held by the creditor.

The creditor must respond within one month of receiving the request. In most circumstances, the creditor cannot charge a fee for complying with the request. A reasonable fee can be charged to cover administration costs where requests are excessive or unfounded or if the client requests further copies of the data.