What is a Subject Access Request (SAR)?
Please note that since the implementation of GDPR there is no longer any charge for responding to data subject access requests. Please do not send any payment.
Providing your Email address and mobile number when submitting your request will allow us to provide your personal data via encrypted Email, avoiding reliance on postal services that may be impacted during this time. If your preference is still to receive a physical copy via post, then we must make you aware that this may delay receipt of your Subject Access Request.**
A Subject Access Request (SAR) is the right of an individual to request any 'personal data' we hold for them. This right is a principle of the General Data Protection Regulation, designed to regulate the processing of information from which a living individual can be identified or singled out either from the information on its own or when combined with other information.
As part of a SAR, individuals have a right to:
- a description of the information held about them
- be informed of the purposes the information is used for
- be informed of the disclosures that are made or might be made
- be informed of the source of the information
- be informed of the envisaged retention period for the data
- be informed if their data is transferred internationally, who the recipients are, and what the adequacy mechanisms for those transfers are
- Receive a copy of their personal information.
Examples of Personal Information you can request
The following are examples of personal information (assuming that the information in question can be linked to an identifiable, living individual):
- Contact details
- CCTV footage
- Complaints or customer service notes
- Customer bank statements or related static data (e.g. the content of application forms)
- Customer medical history
- Customer spending preferences
- Customer work experience history (e.g. we may hold evidence of qualifications referenced in a CV submitted to support a business lending application)
- Employee salary details
- Notes of meetings from employee disciplinary/grievance hearings
- Telephone call recordings
Please note: The bank has a tight regulatory deadline of 30 days to meet so identifying these requests within business as usual processes and is vital in assisting us in meeting this timeframe. You may also request a SAR by contacting the bank by telephone or visiting your local branch.
If you require more information about the Act and their rights, you can contact the Information Commissioner's Office (ICO).
You can submit a SAR via the links below
A Subject Access Request does not provide the following:
Copies of documents - individuals are entitled to their personal information contained in documents, not the documents themselves.
Terms and Conditions, marketing correspondence and product literature, as these are not regarded as personal information.
Partnerships and Limited Company business information, as this is not personal information.
Generating Certificates e.g. Certificate of Good Conduct, Certificate of Debt.
Information in relation to a deceased person, as the Act only applies to a living individual.
Information in relation to another individual, including spouse, business partners, suspected fraudster or a member of staff, as the right is to the individual's personal information, not another person's information.
Telephone banking
03457 424365 (overseas +44 2890 538 033)
Relay UK: 18001 03457 424365
Open 7 days a week 8am-8pm (Automated service 24/7).
Calls may be recorded.
Please have your Customer Number and PIN ready as this will enable your call to be answered faster and more securely. These are the same details you use to log in to Anytime Internet Banking.
Ulster Bank branch locator
Find your nearest branch using our branch locator (opens in a new window).
