The DSAR Playbook

What's Included?

General DSAR Template ▪️Credit File & Finance Template ▪️Telecoms & Service Provider Template 

Follow-Up & Escalation Guidance ▪️ICO Escalation Guidance ▪️Evidence Preservation Strategies

Frequently Asked Questions ▪️Real-World Complaint Insights

What Is A DSAR? 

A DSAR (Data Subject Access Request) is a formal request asking an organisation for the personal data they hold about you. This can include emails, call recordings, complaint notes, account activity, internal correspondence and other records connected to your interactions with that organisation.

In many disputes, complaints and escalations, a DSAR can become one of the most important tools available. Internal records often reveal timelines, decision-making processes, complaint handling activity and information that may not have previously been disclosed.

Why DSARs Matter 

Many people underestimate the importance of internal records during disputes. Companies may initially provide limited explanations, generic responses or incomplete timelines. A properly structured DSAR can help uncover internal complaint notes, escalation records, account logs, archived correspondence and other supporting material.

In some situations, records obtained through a DSAR can help clarify contradictions, establish timelines, preserve evidence or identify procedural failures that may later become important during complaints or escalation processes.

Common Mistakes 

One of the most common mistakes people make is waiting too long before gathering evidence. Screenshots disappear, webpages change and complaint timelines become difficult to reconstruct.

Other common mistakes include making vague requests, failing to preserve correspondence, relying purely on telephone conversations or accepting goodwill gestures before fully understanding the wider situation.

A structured approach early on can make disputes far easier to manage later.

Evidence Preservation 

Evidence preservation is one of the most overlooked parts of many complaints and disputes. Screenshots, PDFs, archived webpages, emails, timestamps and saved correspondence can all become extremely important later.

Keeping organised records from the beginning can help establish timelines, demonstrate inconsistencies and reduce reliance on memory alone. In some cases, information available early in a dispute may later be removed, changed or become difficult to access.

Escalation 

If a DSAR response appears incomplete, delayed or inconsistent, further escalation options may be available. Depending on the circumstances, this can include follow-up correspondence, formal complaints, requests for clarification or escalation to organisations such as the Information Commissioner’s Office (ICO).

Maintaining clear timelines, organised records and professional communication throughout the process can significantly strengthen later escalation efforts.

Related Playbooks...