Policies, contracts, letters, guidance and HR support tools for UK employers.
View full libraryThis Subject Access Request (SAR) Acknowledgement Letter confirms receipt of a request for personal information and explains the next steps in the organisation’s response process. It provides a clear written record of the request, expected response timescale and any information that may be required before the request can be processed.
Use this template to:
If you are managing employee data access and privacy, the toolkit brings together practical HR templates covering requests, verification, review, response and record keeping.
This template brings together the key information, sections and considerations you need to create a clear, comprehensive and professional HR document. Preview the document below.
[Sender name]
[Sender address]
[date]
[Recipient name]
[Recipient address]
Dear [Recipient first name],
Subject Access Request
Thank you for your [email / letter / request] received on [Date], in which you have requested access to personal information held by [Company Name].
We confirm that we have received your Subject Access Request and will now process it in accordance with our data protection obligations.
Response timescale
We will normally provide our response without undue delay and within one month of receiving your request, subject to any applicable requirements relating to identity verification or clarification of your request.
Based on the date we received your request, we currently expect to provide our response by [Response Date].
Where the request is complex or you have made a number of requests, the applicable response
You've seen 30% of how the Subject Access Request (SAR) acknowledgment letter template is structured. Get the complete editable template instantly and customise it for your organisation.
This letter provides a clear and professional acknowledgement when an individual makes a Subject Access Request (SAR). It confirms that the request has been received and sets out what the requester can expect while the organisation identifies, searches for and reviews relevant personal information.
A prompt acknowledgement helps establish a clear audit trail and gives the requester confidence that their request has been identified and passed to the appropriate person or team for handling.
The letter provides the expected date for the response. Under current data protection requirements, organisations normally have one month to respond to a SAR, although the timeframe can be extended by up to a further two months where the request is complex or the individual has made a number of requests.
Where reasonably necessary, the organisation can request proportionate information to confirm the requester’s identity. It may also seek clarification where the request is sufficiently broad or unclear that an effective search cannot reasonably be completed without further information.
The acknowledgement can explain that relevant systems and records will be searched and that information will be reviewed before disclosure. This helps manage expectations without suggesting that every document located will automatically be provided.
Keeping a copy of the acknowledgement with the SAR record provides evidence of when the request was received, what information was requested from the individual and how the response process was managed.
Related HR resources and workflow
Explore the HR resources that may be relevant before and / or after using the Subject Access Request (SAR) acknowledgment letter, helping you understand the wider process, maintain appropriate documentation and follow a consistent approach.
Use these best practice actions, recommended timescales and process stages to understand when and how the Subject Access Request (SAR) acknowledgment letter should be used, helping ensure each step is handled consistently and appropriately documented.
Understand the common mistakes to avoid when using this HR template, helping you reduce risk, prevent unnecessary costs and ensure the process is handled correctly.
No. A SAR can be made verbally or in writing, including by email or other communication methods. The individual does not have to use the words “Subject Access Request” or refer to the UK GDPR.
An acknowledgement creates a clear record that the request has been received, confirms who is dealing with it and helps establish the expected response date. The ICO recommends acknowledging requests electronically or in writing.
Yes, where reasonably necessary to confirm the requester’s identity. The request for identification should be proportionate. If the employer is already confident about the person’s identity, additional formal identification may not be necessary.
The employer can ask for clarification where it is reasonably required to deal with the request effectively. However, a requester cannot simply be required to narrow a valid request because responding to it would be inconvenient or time-consuming.
No. The acknowledgement confirms receipt and explains the process. Relevant information must still be identified and reviewed, including consideration of third-party information, applicable exemptions and appropriate redactions before disclosure.
HRDocBox templates provide structured, practical HR documents designed around UK employment and HR requirements. They give employers a starting point that can be adapted to their own procedures, rather than relying on an AI-generated document that may require significant checking, restructuring and legal review.
How this content is developed and reviewed
The Subject Access Request (SAR) acknowledgment letter template is developed using a practical HR methodology that considers current UK employment legislation, ACAS guidance, CIPD good practice and the real-world HR process it supports. Templates and supporting information are regularly reviewed and updated, with additional reviews triggered by significant changes to legislation, guidance or established HR practice, helping ensure each document remains practical, relevant and suitable for UK employers.
Darryl Horn, Chartered HR Director
Darryl is a Chartered HR professional with over 25 years' experience in senior HR and employee relations roles.
He has extensive practical experience of managing data access and privacy HR processes and founded hrdocbox to provide businesses with practical, professionally developed HR resources grounded in UK employment law and best practice.
HRDocBox has been creating practical UK HR documents since 2009.
"Darryl provides support and advice with excellent judgement, and has a strong understanding of people, policies and UK employment legislation."
"He is someone I trust; consistent, dependable, and committed to doing things properly."
Access a free contract template instantly - or save 10% on any document today.
Use this code at checkout for 10% off anything!
Includes instant download, updates, and full access to your HR templates.