Skip to main content

The organisation treats a request made verbally as valid.

Intent

A person does not have to put a request in writing. Someone who finds writing hard, or who asks during a call, has still made a request.

How to test it

An assessor scores the criterion against a single response:

Score 2
The organisation acted on the verbal request without asking for it in writing.
Score 1
The organisation acted, but only after asking the person to put the request in writing as well.
Score 0
The organisation did not act on the verbal request, or said a request has to be in writing.
Not applicable
The person did not make the request verbally.

The law it reflects

This criterion reflects Article 12(2) of the UK GDPR. That mapping is a guide, not a legal test: conformance is judged against the criterion, not the article.

See A6 in context in the full standard.

Back to reference material

Report a problem with this page