Data subject access requests under GDPR
This factsheet is focused on the initial point at which a company receives a data subject access request made under the General Data Protection Regulation (GDPR).
Please see the final section for access to resources suitable for managing Data Subject Access Requests.
Join a thriving community of skilled directors and leaders
Ask us about membership
Better directors for a better world
The IoD supports directors and business leaders across the UK and beyond to learn, network and build successful, responsible businesses.
Managing data is changing
Browse valuable data resources from the IoD.