A template that controllers can use to create an internal policy on handling data subject requests made under the EU General Data Protection Regulation (GDPR) Articles 15 to 20 and 21 to 22.

For an alternative UK document, see Standard document, Response procedures for data subject requests (UK).