The Data Protection Act 2018 and the GDPR require data controllers to provide information to Data Subjects on request.
The Information Commissioner's Office (ICO) is the UK’s independent authority set up to uphold information rights in the public interest, promoting openness by public bodies and data privacy for individuals.
What a Subject Access Request is and how to deal with it is described on the ICO's website.
If you receive a SAR you should contact your CHARMS account manager as soon as possible. They in turn will immediately contact our Managing Director who will contact you to consider the request and to assist you in formulating a response within the very strict timeframe set out in the GDPR.
The subject's data may be extracted from CHARMS, and we will give all the help that you need.