-The right of access

Jane has the right to access any information held about her. To do this, she’d have to send a Subject Access Request, or SAR.

It’s uncommon for people to send Subject Access Requests, but organisations should still be prepared.

If she sent a SAR to Mike, he’d have to give Jane all the data he holds on her within a month.

There are some exceptions to this rule, but they’re few and far between.

It makes sense for organisations to answer a SAR rather than contest it.

If Jane sends a SAR, and one of these exceptions doesn’t apply, Mike must answer it or risk a fine.