The core law is the same across the UK: UK GDPR and the Data Protection Act 2018 apply in England, Scotland, Wales and Northern Ireland, and the ICO regulates Subject Access Requests everywhere. The one-month deadline is identical.
What does vary is everything around it. Scotland has its own freedom of information regime and its own approach to legal privilege. Welsh public bodies have Welsh-language obligations. Northern Ireland has Industrial Tribunals and integrated health and social care. And each city's mix of employers — universities, councils, contact centres, financial services — shapes the kind of SARs its organisations receive. The pages below cover what's specific to each area.
Choose your area
London
London's financial, legal and professional services firms receive some of the most complex Subject Access Requests in the country — large mailbox exports, dispute-driven requests and data spread across international group systems.
Education, Health & MediaManchester
Greater Manchester's universities, hospitals and media organisations each face SAR rules that generic guidance skips over — from the special timetable for exam marks to the journalism exemption relevant at MediaCityUK.
Social Care & Public SectorBirmingham
Across Birmingham and the West Midlands, some of the most sensitive SARs come from people requesting their social care records — often care leavers seeking files that cover their whole childhood.
Call Recordings & CCTVLeeds
Leeds is one of the UK's largest financial and legal centres outside London, and West Yorkshire has a large contact-centre and shared-services workforce.
Technology & SaaSBristol
Bristol's technology, SaaS and engineering businesses often sit on both sides of a SAR — as the controller for their own staff and customers, and as the processor for their clients' data.
Schools & EducationLiverpool
Schools and academy trusts across the Liverpool City Region deal with two access rights that are easily confused — the SAR and the parental right to see a pupil's educational record.
Housing & Public SectorNewcastle
Housing providers across Newcastle and the North East increasingly receive SARs from tenants — many submitted by claims firms as the first step in a housing disrepair claim.
Scotland & FOISAGlasgow
Data protection law is the same in Scotland as the rest of the UK, but freedom of information isn't.
Scots Law & FinanceEdinburgh
Edinburgh's asset managers, banks, insurers and law firms answer SARs under the same UK GDPR as everyone else — but the legal advice exemption reads differently in Scotland.
Wales & Welsh LanguageCardiff
For Welsh public bodies, a SAR isn't only a data protection matter.
Northern IrelandBelfast
Northern Ireland follows UK GDPR, but its employment disputes go to Industrial Tribunals, its health and social care is integrated in a way the rest of the UK's isn't, and many organisations work across the border with the Republic of Ireland.
Our Home BaseChester
Our team is based in Chester.
How we handle your SAR remotely
- Tell us about the request — the systems involved, the date range and your deadline. We confirm a fixed fee within 24 hours.
- Upload the documents to an encrypted, access-controlled workspace. Nothing is emailed.
- Our specialists review every item and redact third-party and exempt information, logging the legal basis for each decision.
- You receive a finished disclosure pack, covering letter and redaction schedule, ready to send.
Every case is quoted individually on the size and complexity of your dataset, and the fixed fee is agreed before any work begins.
Wherever you are, the process is the same
Tell us the scope and your deadline, and we'll confirm a fixed fee within 24 hours. No commitment required.
Get Your Free SAR Assessment →or call 01244 261 379Frequently asked questions
Do you need to visit our site to handle a SAR?
No. Every case is handled remotely through a secure, encrypted workspace. Nothing is emailed, and no one needs to be on site.
Do you cover areas that aren't listed here?
Yes. The service is UK-wide. These pages cover the places where local sector or legal differences affect how SARs are handled.