Verbal or in Writing?
One of the issues that is alarming companies, post-GDPR, is the right to access and the submission by data subjects of a ‘subject access request‘.
All staff need to be aware of this policy as a subject access request can be made at any time, verbally or in writing, to anyone within the organisation. The SAR doesn’t need to be on a specific form and you can’t make completion of a form mandatory. However, if you provide a form and your data subjects make use of it, this may reduce or eliminate requesters who ask “for everything you hold” about me……
Simply amend to include your header, footer, logo and some other key pieces of information (such as contact details etc.)