Flowing shape with cream and black dots spinning around in the air representing individuals' rights requests for organisations across the UK.
Home / Services / Risk, Incidents & Enforcement / Individuals’ Rights Requests


We offer independent, support for individuals who have had their GDPR rights breached. Helping you understand the any response you have had, identify practical next steps, and decide how progress your concerns.


Individuals’ Rights Requests


We’ve helped individuals gain back control of their data and help them understand what their data protection rights are and what practical steps to do this.

We help individuals understand whether their data protection rights have been handled properly and what practical steps may be available next.

  1. Review of your rights request, including subject access requests, erasure requests, rectification requests, restriction requests, objection requests and complaints about how your personal data has been used.
  2. Assessment of the organisation’s response, including whether it answered the request properly, responded within the correct timeframe and explained any refusal or exemption clearly.
  3. Review of documents disclosed to you, including whether information appears to be missing, heavily redacted, incomplete or inconsistent with what you expected to receive.
  4. Identification of possible data protection issues, such as inaccurate data, unfair processing, excessive data retention, poor transparency, unauthorised sharing or failure to respond to your concerns.
  5. Support with follow-up correspondence, including helping you ask clearer questions, request missing information, challenge inadequate responses or set out your concerns in a structured way.


What we need from you:

1

A copy of the request you sent.

2

A copy of the organisation’s response (if any) and any documents disclosed.

3

A short summary of what you are concerned about.


Costing structure

Final pricing subject to discussion.

Initial Review
Detailed Review
Ongoing Support
From £375
From £750
From £1,500
Review of your request and the organisation’s response
Review of your request, response and disclosed documents
Support with a more complex or ongoing rights issue
Initial view on whether the response appears complete and properly explained
Assessment of missing data, redactions, exemptions and timeframes
Follow-up correspondence and challenge strategy
Practical next-step recommendations
Written findings and recommended next steps
Support preparing an ICO complaint or formal response
Suitable where you need a quick view
Suitable where the disclosure is unclear, incomplete or heavily redacted
Suitable where the matter is sensitive, ongoing or disputed

UK data protection law gives individuals the right to understand how their personal data is being used and, in certain circumstances, to challenge how an organisation has handled it.

This may include asking for access to your personal data, requesting correction or deletion, objecting to certain types of processing, asking for restriction, or challenging an organisation’s response where it appears incomplete, delayed or unclear.

We help you understand what the organisation has provided, whether the response appears to deal properly with your request, and what practical steps may be available if you remain concerned. This may include follow-up correspondence, a complaint to the ICO, or preparing your position before taking further advice.

We are a solicitor-led organisation with over 25 years’ experience in data protection and privacy law. We help individuals understand whether an organisation has handled their personal data properly and what steps may be available if a response appears incomplete, delayed or unfair.


We can review responses to subject access requests, missing documents, redactions, exemption claims, deletion concerns, inaccurate data and wider concerns about how your personal information has been used or shared.



Book an initial discussion

Speak directly with a data protection solicitor +44 (0)79769 39016 (9:00 am – 6:00 pm UK time). If you would like us to call or email you, please leave your details and a short summary of the issue. We will let you know whether we can help and what information we would need to review.

Westbrook Data Protection Services Limited, 2nd Floor, Midas House, 62 Goldsworth Road Woking, Surrey, GU21 6LQ

Our team have a deep understanding of the following areas of law and continue to add value to our clients’ businesses.


Latest Insights