Flowing shape with cream and black dots spinning around in the air representing individuals' rights requests for organisations across the UK.
Home / Services / Risk, Incidents & Enforcement / Individuals’ Rights Requests


We offer independent support for individuals who have had their GDPR rights breached. Helping you understand any response you have had, identify practical next steps, and decide how to progress your concerns.


Individuals’ Rights Requests


We’ve helped individuals regain control of their data and help them understand what their data protection rights are and what practical steps to do this.

We help individuals understand whether their data protection rights have been handled properly and what practical steps may be available next.

  1. Review of your rights request, including subject access requests, erasure requests, rectification requests, restriction requests, objection requests and complaints about how your personal data has been used.
  2. Assessment of the organisation’s response, including whether it answered the request properly, responded within the correct timeframe and explained any refusal or exemption clearly.
  3. Review of documents disclosed to you, including whether information appears to be missing, heavily redacted, incomplete or inconsistent with what you expected to receive.
  4. Identification of possible data protection issues, such as inaccurate data, unfair processing, excessive data retention, poor transparency, unauthorised sharing or failure to respond to your concerns.
  5. Support with follow-up correspondence, including helping you ask clearer questions, request missing information, challenge inadequate responses or set out your concerns in a structured way.


What we need from you:

1

A copy of the request you sent.

2

A copy of the organisation’s response (if any) and any documents disclosed.

3

A short summary of what you are concerned about.


Individual Rights Request Support — Fixed Fee Table

We provide practical support with individual rights requests under the UK GDPR, including subject access requests, erasure requests, rectification requests and objections. Our fixed-fee support starts from £150 + VAT, with a clear quotation provided before any work begins.

For more complex requests, or where several rights are exercised at the same time, we will confirm the likely scope, timescale and cost before starting work.

Individual Rights Request

Fixed Fee
Right to be Informed
Individuals have the right to know how their data is collected, used, and with whom it is shared.
From £150 + VAT
Right of Access (DSAR)
Individuals can request a copy of their personal data and confirmation that it is being processed
From £150 + VAT
Right to Rectification
Allows individuals to have inaccurate personal data corrected or incomplete data completed.
From £150 + VAT
Right to Erasure / Right to be Forgotten
Individuals can request that their personal data is deleted, usually in cases where the data is no longer necessary, consent is withdrawn, or there is no legitimate reason for processing.
From £150 + VAT
Right to Restrict Processing
Individuals can request that an organization restricts the use of their data in specific scenarios (e.g., while verifying accuracy).
From £150 + VAT
Right to Data Portability
Allows individuals to obtain and reuse their personal data for their own purposes, in a machine-readable format to move to another service.
From £150 + VAT
Right to Object
Individuals can object to their data being used for direct marketing, research, or legitimate interests/public tasks.
From £150 + VAT
Rights Related to Automated Decision-Making / Profiling
Protects individuals from being subject to decisions made solely by automated means that significantly affect them, including profiling.
From £150 + VAT

UK data protection law gives individuals the right to understand how their personal data is being used and, in certain circumstances, to challenge how an organisation has handled it.


This may include asking for access to your personal data, requesting correction or deletion, objecting to certain types of processing, asking for restriction, or challenging an organisation’s response where it appears incomplete, delayed or unclear.


We help you understand what the organisation has provided, whether the response appears to deal properly with your request, and what practical steps may be available if you remain concerned. This may include follow-up correspondence, a complaint to the ICO, or preparing your position before taking further advice.

We are a solicitor-led organisation with over 25 years’ experience in data protection and privacy law. We help individuals understand whether an organisation has handled their personal data properly and what steps may be available if a response appears incomplete, delayed or unfair.


We can review responses to subject access requests, identify missing documents, check redactions, assess exemption claims, redactions, exemption claims, deletion concerns, inaccurate data and wider concerns about how your personal information has been used or shared.



Book an initial discussion

Speak directly with a data protection solicitor +44 (0)79769 39016 (9:00 am – 6:00 pm UK time). If you would like us to call or email you, please leave your details and a short summary of the issue. We will let you know whether we can help and what information we would need to review.

Westbrook Data Protection Services Limited, 2nd Floor, Midas House, 62 Goldsworth Road Woking, Surrey, GU21 6LQ

Our team have a deep understanding of the following areas of law and continue to add value to our clients’ businesses.


Latest Insights