GDPR provides data subjects with the right to access their personal data. This procedure template describes the steps that should be taken by an organisation to receive, validate and respond to data subject access requests, in order to address the requirements of data protection legislation.