The UK General Data Protection Regulation (UK GDPR) sets out seven key principles:

    • Lawfulness, fairness and transparency
    • Purpose limitation
    • Data minimisation
    • Accuracy
    • Storage limitation
    • Integrity and confidentiality (security)
    • Accountability

 

There is a proforma for how to make a subject access request below, although this can be made in any format.