#ad Affiliate disclosure: Some links may be affiliate links. We may earn a commission at no extra cost to you. This supports our independent testing. Learn more
Subject Access & Deletion Request Generator
Compose a GDPR/CCPA/LGPD-compliant request to obtain, delete, or manage personal data held by a company. Fill in the details, then copy or download the letter for submission to the controller.
This template reflects global privacy regulations but does not constitute legal advice. Verify local requirements before submission.
Request Details
Provide the minimum details required for the controller to locate your records.
Generated letter
Review, copy, or download the request template.
Subject: Subject Access Request – August 22, 2026 Data Protection Officer To the Privacy Team, I am . Pursuant to Articles 12-23 of the GDPR / UK GDPR, I am exercising my right of access to obtain confirmation as to whether you process my personal data and to receive a copy of that data alongside the required information about processing activities (purposes, categories, recipients, retention, safeguards, automated decision-making). Please provide the requested information securely within one month of receipt, or inform me of any justified extension. If you require proof of identity, specify what is needed without retaining unnecessary data. Please deliver your response via Email reply to the address listed above. Regards,
Filing tips
Send SARs to the dedicated privacy or data protection contact listed in the company’s privacy policy. If unavailable, use their support channel and request escalation to the privacy team.
Keep a timestamped record of your request, any follow-up, and the eventual response. Regulators typically require proof of correspondence if you escalate a complaint.
Some controllers may request identity verification. Provide only the minimum information necessary (for example, a redacted ID) and confirm they will delete it after verification.