Rectification, Erasure, Restriction and Objection Request Procedure and Letters

A step-by-step procedure, request log and ready-to-send response letters for the other individual rights under UK GDPR – correction, deletion (“right to be forgotten”), restriction, objection and data portability.

Editable Word document
8
10pages
Guidance notes included
aml consultancy solutions

Data protection & GDPR

Rectification, Erasure, Restriction and Objection Request Procedure and Letters

About this document

What it’s for

Subject access requests get most of the attention, but people also have the right to have data corrected, deleted, restricted or moved, and to object. This procedure tells staff how to recognise and handle these requests within the legal time limit, and includes the letters you will need. It complements the Subject Access Request Procedure and Response Letters.

When to use it

  • Whenever someone asks you to correct, delete, stop using or transfer their information
  • When someone objects to direct marketing or to processing based on legitimate interests
  • When training customer-facing staff

What’s inside

The document is laid out in the sections below. Each one comes with a plain-English guidance note explaining what it does and what to change.

  1. Purpose and scope
  2. Recognising a request
  3. First steps
  4. Refusals and complaints
  5. Records

Also included

  • Schedule 1 – Rights request log
  • Schedule 2 – Response letters
  • Letter 1 – Acknowledgement
  • Letter 2 – Extension of time
  • Letter 3 – Request completed
  • Letter 4 – Request refused (in whole or part)

How to complete it

  • Fill in the contact point and who decides requests
  • Log every request in Schedule 1 and diary the response date
  • Choose the correct letter from Schedule 2 and fill in the details

Key points to check

  • You normally have one month to respond, extendable by two months for complex or numerous requests
  • Objections to direct marketing must always be honoured

Our templates are professionally structured starting points for UK businesses, not legal advice. For anything complex, unusual or high-value, have your final version checked by a solicitor.

Included in the pack

Data protection & GDPR

£20

for every document in this category

Editable Microsoft Word files

Guidance notes in every document

Written for UK businesses

Download and keep

Get the packSee every document in this pack →

Need more than one category?

Documents All-Access gives you every category for 12 months for £295.

Compare options →

Need it tailored?

We can adapt any template to your business, or write a document from scratch.

Talk to us →