On this page
Key takeaways
- A SAR gives you a copy of the personal data a debt collector holds about you.
- It is free and the organisation generally has one month to reply, extendable by up to two months for complex requests.
- A SAR is different from a Consumer Credit Act request for the credit agreement.
- Send it by email or recorded delivery and keep proof.
- If the company ignores you, complain to the Information Commissioner's Office.
- Read up on statute-barred debt before replying about an old debt.
A subject access request (SAR) lets you ask any organisation for a copy of the personal data it holds about you, and a debt collector is no exception. It is free, the organisation generally has one month to reply, and it can show you what the company knows, where the debt came from and how your account has been recorded. This is different from asking for proof of the debt, so it can be a useful extra step rather than a replacement.
What is a SAR?
The right comes from data protection law, including the UK GDPR and the Data Protection Act 2018. It gives you the right to a copy of your personal data and information about how it is used. A debt collector, debt purchaser, solicitor or original lender must respond to a SAR in the same way as any other organisation.
A SAR is not the same as the Consumer Credit Act request in our guide to requesting your credit agreement. That request asks for the agreement itself and carries a £1 fee. A SAR asks for the data held about you, and is free.
Why use one on a debt collector?
- See the account history the collector holds, including dates and amounts
- Check that the data matches your own records
- Find out which agents, trace firms or credit reference agencies it has shared data with
- See notes of calls, complaints and your contact preferences
- Spot errors that could support a dispute or complaint
- Get evidence if you are unsure the debt is yours. See what to do if you do not recognise a debt
How to make one
Which? explains the steps. Send your request to the right person, which is often the data protection officer listed on the company's website, and keep it simple.
- List what you want, such as account records, call notes, correspondence and details of who the data was shared with
- Give your full name, address, phone number and any account or reference numbers
- Mention that you are making a subject access request and that the organisation has one month to respond
- Send it by email or recorded delivery, and keep copies of everything
- If you ask by phone, follow up in writing
How long will it take?
The organisation must reply without delay and within one month of receiving your request. For complex or numerous requests it can extend by up to two further months, but it must tell you within the first month and explain why. Note the date you sent the request and the date it was received, because the deadline counts from receipt.
Will it cost anything?
A SAR is free. The company can only charge a reasonable fee if a request is manifestly unfounded or excessive, particularly if it is repetitive, or for further copies of the same information. If a firm asks for a fee, challenge it politely and ask them to explain the basis.
What you should receive
You should receive a copy of the personal data you asked for, in a commonly used format, whether it is held electronically or on paper. Companies may withhold some information, such as data that would identify another person, or data related to a criminal or tax investigation. If something is withheld, ask the reason.
A short example you can adapt
You do not need a formal template, but a clear request might say: "I am making a subject access request under data protection law. Please send me all personal data you hold about me in connection with account reference [number], including account records, call notes, correspondence and details of who my data has been shared with. Please reply within one month." Add your name, address and contact details, and keep a copy.
What to look for in the reply
- Does the name, address and date of birth match your records?
- Does the balance match the amount in the original statements?
- Are there notes of calls that you disagree with?
- Is there evidence the debt was assigned to the current owner?
- Has your data been passed to trace agents or other firms?
- Is anything missing that you expected, such as emails or complaints?
Other organisations in the debt chain
Each organisation holding your data has to answer a SAR separately. If a debt has been sold, you may want to send one to the original lender, the debt purchaser, any collection agency and any solicitors, so you can compare what each holds. See our guide to a notice of assignment for how a debt moves between owners.
If they ignore you
If the company ignores your request or misses the deadline, you can complain to the Information Commissioner's Office (ICO). The ICO can investigate and fine organisations, but it cannot award compensation to individuals. Keep your evidence of when you sent the request. If you want to complain about how a regulated debt firm has treated you more broadly, our guide to debt collectors that will not stop calling explains the complaints route, including the Financial Ombudsman Service.
Keep your own file
Create one folder for the debt: the original letters, your SAR, proof of posting, the reply and any follow-up. If you later complain to the firm, the Financial Ombudsman Service or the ICO, a clear timeline is the strongest thing you can bring. Note dates, because the one-month deadline runs from the day the request was received.
Before you use it
A SAR will not make a debt go away, and replying to a collector about an old debt can have consequences. If the debt may be very old, read our guide to statute-barred debt before you contact the firm, because a payment or written acknowledgement in England and Wales can restart the clock. Free advice from Citizens Advice, MoneyHelper, StepChange or National Debtline can help you decide.
Frequently asked questions
Can I make a subject access request to a debt collector?
How long does a debt collector have to respond to a SAR?
Does a SAR cost anything?
Is a SAR the same as asking for proof of the debt?
What if the collector does not reply?
Will a SAR stop the debt collector contacting me?
Sources and further reading
- How do I make a subject access request (SAR)? — Which?
- Data Protection Act 2018 — legislation.gov.uk
- MoneyHelper: free debt advice — MoneyHelper
- Debt and money help — Citizens Advice
This page provides general information only. It is not personalised financial, legal or tax advice, and rules and figures can change. Your situation is unique — please check official sources such as GOV.UK and MoneyHelper, and speak to a qualified, FCA-authorised adviser before making important decisions about your money.
Written by
MoneyBrink Editorial Team — Editorial team
The MoneyBrink Editorial Team researches, writes and reviews every guide on this site. We work from official UK sources such as GOV.UK, the Financial Conduct Authority, MoneyHelper and the Money and Pensions Service, explain things in plain English, and update articles when the rules change. We do not sell financial products and we do not give personal advice.
Read how we research and check our guides in our editorial policy.
Read next
How to Request a Copy of Your Credit Agreement (UK, Consumer Credit Act)
Ask for a copy of your credit agreement under the Consumer Credit Act: the £1 fee, the 12-working-day deadline and what happens if they don't reply.
8 min readRead Debt CollectionI Don't Recognise This Debt: What to Do If a Collector Contacts You (UK)
Don't recognise a debt a collector is chasing? Learn how to dispute it, what proof to ask for and how to check for fraud or a scam.
8 min readRead Debt CollectionDebt Collector Won't Stop Calling: Your Rights and How to Stop Harassment (UK)
Debt collector won't stop calling? Learn what counts as harassment in the UK, how to change how they contact you, and how to complain.
8 min readRead Debt CollectionStatute-Barred Debt: The Six-Year Rule and UK Time Limits
Is your debt too old to be enforced? Learn the UK time limits, what restarts the clock, how it differs from your credit file and what to do before replying.
9 min readRead