- Are you satisfied about the identity of the person making the request? If not, determine what additional information you require and request this promptly.
- Do you have all the information you need to locate the data? If not, determine what additional information you require and request this promptly.
- Consider if there are any grounds to refuse to comply. There are very limited grounds to refuse and you must be able to show that the request is manifestly unfounded or excessive. If you do decide to reply you may be able to charge a fee. Seek advice if you are unsure. This may apply if, for example, the data subject has already made a previous data access request covering the same data (with which you complied) and a reasonable time has not elapsed.