Different sectors hold different types of data about you. Choose your industry for a template and guidance tailored to what that sector typically collects.
Your employer is a data controller under GDPR and must respond to a Subject Access Request just like any other organisation. Employment relationships often involve extensive data collection — some of which you may not be aware of.
Generate request → Bank / Financial InstitutionBanks and financial institutions hold some of the most sensitive personal data about you, including detailed financial history, credit assessments, and identity documents. GDPR gives you the right to see all of it.
Generate request → Healthcare Provider (NHS / GP)Medical and health data is classified as 'special category data' under Article 9 GDPR, meaning it receives stronger protections. You have the right to access all records your healthcare provider holds about you.
Generate request → Insurance CompanyInsurance companies build detailed profiles to assess risk and price policies. This data often includes information from third parties — such as previous insurers, databases, and credit agencies — that you may never have seen.
Generate request → Mobile / Broadband ProviderTelecoms providers hold extensive data about your communications and movements. Location data from mobile networks in particular can reveal detailed patterns about your daily life.
Generate request →