Short answer
Prepare the SAR request, proof of submission, response, disclosure bundle, refusal or exemption reasons, correspondence, ICO complaint material, impact evidence and any court or limitation dates.
Quick checklist
Start with these
Best order
How to organise the first pack
- Put the SAR request, submission proof and response date first.
- Add the disclosure received, missing-data schedule and any exemption reasons.
- Organise chasers, identity checks, ICO correspondence and complaint records chronologically.
- Summarise the remedy sought, such as further disclosure, advice, response drafting or claim review.
Define The SAR Problem
A subject access request dispute may involve no response, delay, partial disclosure, redactions, exemptions, identity checks, third-party data, employment records, customer records or regulator correspondence. The first summary should identify the controller, request date, response date and what remains disputed.
A barrister may advise on the legal issues, evidence, complaint route, settlement, drafting or suitable proceedings. Some matters need solicitor support if ongoing correspondence, disclosure or litigation management is required.
Evidence To Gather
The pack should show exactly what was requested, what was provided or refused and why the issue still matters.
- Original SAR, proof of delivery, portal receipt, email headers or postal record.
- Identity verification requests, clarification correspondence and response dates.
- Disclosure bundle, index, redactions, withheld categories and exemption wording.
- Chaser emails, internal complaint, ICO complaint, ICO response and regulator reference.
- Related employment, consumer, public authority, data breach or privacy documents.
- Evidence of distress, loss, practical impact, settlement offers or court papers.
Questions A Barrister May Consider
The first advice request may ask whether the response appears complete, whether exemptions need review, what further information is needed, how to frame a complaint or response, and whether any claim or defence is proportionate.
The guide does not give case-specific advice on time limits, exemptions or compensation. Those points depend on the facts, current law and the documents.
Review Notes For Data Protection Procedure
Data protection law, ICO guidance, court procedure and limitation issues can change. Current UK GDPR, Data Protection Act 2018, ICO guidance and specialist review should be checked before detailed publication wording.
Avoid delays
What not to send first
- Sending only a narrative without the original SAR and response.
- Omitting the controller's exemption wording or redaction explanation.
- Leaving out ICO complaint records or related proceedings.
- Assuming every incomplete SAR creates the same legal remedy.
Source/review note: subject access, exemptions, ICO procedure and data protection claims should be checked against current ICO guidance, UK GDPR, Data Protection Act 2018 and specialist review before publication.
Editorial status: source and legal review required. No completed legal review is claimed.
Subject Access Request Barrister Evidence Guide FAQs
Can a barrister advise on a subject access request dispute?
A data protection barrister may advise on the response, exemptions, evidence, complaint route or claim issues where the work can be properly scoped.
Should I send the disclosure bundle?
Yes. The request, response, disclosure bundle, redactions and withheld-data explanation are central to a focused review.
Is a SAR dispute the same as a data breach?
Not usually. A SAR dispute concerns access to personal data, although it may overlap with data breach, employment, privacy or public authority issues.
Ask For A Barrister Quote
Barristers4U helps clients request a quote from a suitable Direct Access barrister. The information on this page is general information only, not legal advice about your individual circumstances.
If your matter is urgent, include hearing dates, court deadlines, orders and any documents you already have when you submit your enquiry.
