Here is a full request under the new GDPR rules. You do not need to pay the fee and while you should sign it you can send it by email
[Their address]
[Date]
Dear Sir/Madam
GENERAL DATA PROTECTION REGULATIONS - SUBJECT ACCESS REQUEST
ACCOUNT /REF NUMBER XXXXXXXX
Please supply me with copies of all the data which you hold on me in relation to any matter and in any form and for any period of time.
Please note that I require disclosure of any personal data which you hold on me for the entire period of my dealings with you.
This Subject Access Request includes - but is not limited to any data you hold about me in respect of any matter and held in any form including; statements, notes, screen notes, recordings, internal correspondence and external correspondence. Please note that this Subject Access Request is not limited to the account/reference number mentioned above but that number has been provided purely as a starting reference for you.
For the avoidance of doubt, and as stated above, this Subject Access Request requires disclosure of ALL personal data which you hold on me for the entire period of my dealings with you
there is no applicable fee for this data disclosure – unless you feel that my request is manifestly unfounded, excessive or repetitive – in which case you have a duty to let me know without any delay.
Under the new GDPR regime, you must satisfy this data disclosure request as soon as possible and in any event within one month.
If there is specific information which you require in order to satisfy yourself as to my identity, please let me know by return however, you are not entitled to impose any formality upon me or to require that I complete any particular form or template before you comply with your statutory duty.
I also require you to confirm to me that you are processing my personal data, how you acquired it, for what purpose you are processing it and also to identify all the parties with whom you have shared it. You are required to provide this information regardless of whether you believe that the substantive disclosure satisfies the conditions which permit you to impose a charge.
I also required to know whether my data has been subject to any automatic processing which has resulted in decisions or suggested decisions being made in respect of me. Also, has my personal data been used in any way to categorise me or to place me on any lists. If so please explain.
Finally, I should remind you that you have a duty to make clear the meaning of any codes or shorthand which you use in relation to my personal data.
If I do not hear from you then I will assume that this Statutory Request is satisfactory and that the one month timescale has started.
If you fail to comply with all of your obligations, I will make an immediate complaint to the Information Commissioner about your statutory breach – and without any further notice to you.
This may also lead to legal action in the county court and a judgement will then be forwarded to the FCA.
Yours faithfully,
[name]
Here is a link to Barclaycard where you can ask for the info https://ask.barclaycard.co.uk/busine...eral_info/GDPR
[Their address]
[Date]
Dear Sir/Madam
GENERAL DATA PROTECTION REGULATIONS - SUBJECT ACCESS REQUEST
ACCOUNT /REF NUMBER XXXXXXXX
Please supply me with copies of all the data which you hold on me in relation to any matter and in any form and for any period of time.
Please note that I require disclosure of any personal data which you hold on me for the entire period of my dealings with you.
This Subject Access Request includes - but is not limited to any data you hold about me in respect of any matter and held in any form including; statements, notes, screen notes, recordings, internal correspondence and external correspondence. Please note that this Subject Access Request is not limited to the account/reference number mentioned above but that number has been provided purely as a starting reference for you.
For the avoidance of doubt, and as stated above, this Subject Access Request requires disclosure of ALL personal data which you hold on me for the entire period of my dealings with you
there is no applicable fee for this data disclosure – unless you feel that my request is manifestly unfounded, excessive or repetitive – in which case you have a duty to let me know without any delay.
Under the new GDPR regime, you must satisfy this data disclosure request as soon as possible and in any event within one month.
If there is specific information which you require in order to satisfy yourself as to my identity, please let me know by return however, you are not entitled to impose any formality upon me or to require that I complete any particular form or template before you comply with your statutory duty.
I also require you to confirm to me that you are processing my personal data, how you acquired it, for what purpose you are processing it and also to identify all the parties with whom you have shared it. You are required to provide this information regardless of whether you believe that the substantive disclosure satisfies the conditions which permit you to impose a charge.
I also required to know whether my data has been subject to any automatic processing which has resulted in decisions or suggested decisions being made in respect of me. Also, has my personal data been used in any way to categorise me or to place me on any lists. If so please explain.
Finally, I should remind you that you have a duty to make clear the meaning of any codes or shorthand which you use in relation to my personal data.
If I do not hear from you then I will assume that this Statutory Request is satisfactory and that the one month timescale has started.
If you fail to comply with all of your obligations, I will make an immediate complaint to the Information Commissioner about your statutory breach – and without any further notice to you.
This may also lead to legal action in the county court and a judgement will then be forwarded to the FCA.
Yours faithfully,
[name]
Comment