“It’s on your file.” The letter that makes them prove it.
A subject access request runs on a one-month clock and costs nothing. How the letter works — and the free ICO route if the deadline passes.
Exercise your data rights in England and Wales with free, plain-English guides to subject access requests, ICO complaints, erasure and Freedom of Information. Whether an organisation is holding your information, has lost it, or won’t hand it over, these step-by-step guides walk you through the UK GDPR and FOI process box by box. Start with a subject access request (SAR) to see exactly what an organisation holds about you, learn how to complain to the ICO when your rights are ignored, ask for your data to be deleted under the right to erasure, or make a Freedom of Information request to a public authority. If a data breach has caused you damage or distress, our personal data breach compensation guide explains your rights under Article 82 of the UK GDPR — and if you decide to claim compensation through the courts, the Money Claim Online complete walkthrough shows you the county court process step by step. Every guide is free to read — and when you’re ready, Chris can help you draft your own documents to a professional standard, in minutes.
A subject access request runs on a one-month clock and costs nothing. How the letter works — and the free ICO route if the deadline passes.
FOI/EIR request refused, ignored, or fobbed off? Request an internal review, then complain to the ICO. Chris drafts both.
Ask for environmental information held by public bodies under the EIR 2004 — planning, pollution, emissions, land. 20 working days. Chris drafts it.
Ask any UK public authority for recorded information under the Freedom of Information Act. 20 working days, usually free. Chris drafts your request.
Data breach — 72-hour ICO notification, high-risk individual notification, Article 82 compensation, Lloyd v Google.
Right to erasure — Article 17 UK GDPR grounds, exemptions, Google de-indexing, employment records, drafting.
ICO complaint — UK GDPR, DPA 2018, PECR marketing, Article 82 parallel claim, timeline, remedies.
Draft a Subject Access Request — Article 15 UK GDPR, scope, exemptions, timeline, controller defeats, cross-claim use.
How to draft a UK GDPR-compliant privacy policy in 2026. Controller duties, Article 6 bases, cookies, rights. Chris drafts to ICO standard.
By the eLitigant Editorial Team · Reviewed for current forms, fees & procedure · How we check our guides Draft
By the eLitigant Editorial Team · Reviewed for current forms, fees & procedure · How we check our guides Draft
By the eLitigant Editorial Team · Reviewed for current forms, fees & procedure · How we check our guides Draft
Practical court-preparation tips — free to your inbox