Data Request Information
What must be in place before London SAM can process UK data-protection requests on a production site.
Production contact required
The source package intentionally does not invent a controller email address or postal address. Before a public service collects personal data, the publisher should add verified controller identity and contact information to this page and the privacy policy.
Making a request
Once the verified route is live, a requester should be able to describe the right they wish to exercise and provide enough information for the controller to locate relevant data and verify identity proportionately. Do not send sensitive identity documents through an unverified static form.
Scope
Rights and response obligations depend on applicable UK data-protection law and the actual processing carried out by the production site. Obtain jurisdiction-specific professional advice if the deployment creates complex processing, advertising profiles or large-scale tracking.