Skip to main content

The organisation treats a request as valid whatever wording it uses.

Intent

Most people do not know the phrase ‘subject access request’. Someone who asks in plain words for a copy of their data has made a request.

How to test it

An assessor scores the criterion against a single response:

Score 2
The organisation acted on the request as worded, without asking for it in set terms.
Score 1
The organisation acted, but first asked the person to resubmit the request in particular words or to cite the law.
Score 0
The organisation did not act because of the words used, or because the request did not cite the law.

The law it reflects

This criterion reflects Article 12(2) of the UK GDPR. That mapping is a guide, not a legal test: conformance is judged against the criterion, not the article.

See A5 in context in the full standard.

Back to reference material

Report a problem with this page