Can a third party make a Subject Access Request on your behalf?

A third party can make a Subject Access Request (SAR) on your behalf only if you have authorized them to do so. This authorization could take various forms, such as a written consent or a power of attorney, effectively granting them the right to access your personal data held by an organization.

This requirement for authorization ensures that your privacy is protected and that you have control over who can access your information. Without explicit permission from you, a third party would not be able to request your data, which is important for maintaining the integrity of data protection laws.

In some cases, if the third party is a legal representative, such as a solicitor, they may be able to access your information without your explicit consent, but generally, the principle of authorization remains crucial. Therefore, the need for your permission emphasizes the importance of individual control over personal data.