.png)
DATA PROTECTION — SOLICITOR DATA SUBJECT ACCESS REQUEST (DSAR)
Your solicitor holds your
complete file. You have
the right to see all of it.
A Subject Access Request is one of the most effective tools available to anyone with a complaint about a solicitor. Used correctly, it gives you the complete picture of your matter: the advice given, the billing decisions made, the internal communications between fee earners, and the complaints handling record. What people find is almost always more significant than they expected.
TIMING MATTERS - PARTICULARLY IF YOU ARE CONSIDERING A LEGAL OMBUDSMAN COMPLAINT
Data that exists today may be legitimately deleted tomorrow in the ordinary course of business. If you have been dismissed, the employment tribunal window is three months minus one day from your effective date of termination. The earlier a DSAR is submitted in a dispute, the more likely it is to capture the full picture. If you are unsure whether now is the right moment, the consultation will help you decide.
Most people in a dispute are working with half the picture. A DSAR gives you the other half.
When something goes wrong in a legal matter, the documents that matter most are often the ones you never received. The attendance note from a meeting where important advice was given, or not given. The internal file memo written when costs began to exceed the estimate. The email between fee earners discussing how to handle a client complaint. The billing records showing how time was recorded against your matter. These documents belong to your file and under UK GDPR you are legally entitled to receive them.
A Subject Access Request requires your solicitor to locate and provide all personal data they hold about you: correspondence on your behalf, case notes and attendance notes, internal communications in which you are named or discussed, billing records, counsel instructions, and any other documentation that relates to you as an identifiable individual. The firm has 30 days to respond. They cannot simply decline. And what they provide, or conspicuously fail to provide, tells a story.
The practical value of a well-scoped SAR in a legal complaint is difficult to overstate. File notes reveal whether advice was given in the terms the solicitor later claims. Billing records expose the difference between what was agreed and what was charged. Internal correspondence shows whether costs were being managed in the client's interest or the firm's. Complaints handling records frequently contradict what was later said in the firm's formal response. None of this is ordinarily shared unless you ask for it properly.
The SAR is not only about gathering evidence. It is also a signal. A correctly drafted, formally submitted request tells the firm that you understand your rights, that you intend to use them, and that you are approaching the complaint seriously. Solicitors are regulated by the SRA and subject to specific data protection obligations as data controllers. They know what a properly scoped request means.
Drafting the request correctly is the first requirement. A poorly scoped SAR gives the firm room to interpret it narrowly and return less than they hold. A well-scoped request, directed at the right categories of data and the right systems, leaves no legitimate basis for a reduced disclosure. Getting this right at the outset changes the quality of what comes back.
When the firm's response arrives, interpreting it requires both legal knowledge and familiarity with how solicitors manage their files and billing. What has been provided is only part of the picture. What has been withheld, redacted, or conspicuously absent tells its own story. Our response review identifies both, documents the findings, and tells you clearly what the disclosure means for your complaint and what you should do next. You can instruct us for the drafting, the review, or both.
"The moment a client reads the fee earner's internal note about their matter, written months before the complaint was even raised , is the moment the picture changes. Not just for the client. For the firm, too, once they realise what has been disclosed."
WHY SAFEGUARD LEGAL
This service is right for some situations and not for others.
THIS IS RIGHT FOR YOU IF
You are considering a complaint to the Legal Ombudsman and need your file to support it
You have made a complaint to the firm and want to understand what their file records show
You believe you have been overcharged and want to see the underlying billing records
You have changed solicitors and need the data your previous firm holds
You have already received a SAR response and need help understanding what it contains and what is missing
You want a fixed cost with no surprises
THIS IS NOT RIGHT FOR YOU IF
You need regulated legal advice on whether to bring a professional negligence claim
Your matter involves parallel proceedings where data disclosure may have evidential implications you need to have assessed by a qualified solicitor
You need representation before the ICO or in proceedings relating to a data protection breach
You require a SAR directed at an organisation other than a solicitor or law firm, for employment or other DSAR matters, please see our separate service pages
WE CAN HELP WITH
SAR situations we work with regularly.
01
SAR to support a Legal Ombudsman complaint
The Legal Ombudsman will consider what the firm's own records show about the service provided. A SAR submitted before a LeO complaint is lodged ensures you have the full picture before making your case. Attendance notes, internal correspondence, and billing records frequently contain information that significantly strengthens a complaint that would otherwise rest on the client's word against the firm's.
04
SAR following a change of solicitor
When you change solicitors, your former firm is obliged to transfer your file. A SAR ensures that what is transferred is complete and that nothing significant has been omitted. It also captures data held outside the physical file, including internal correspondence and electronic records that would not necessarily be included in a standard file transfer.
02
SAR to support an SRA complaint
Where your concern is about professional conduct rather than service quality, the SRA is the appropriate route. A SAR can surface internal communications, billing decisions, and case management records that are directly relevant to an SRA complaint about a solicitor's conduct. We help you scope the request to maximise the relevance of what is returned.
05
Response review where a SAR has already been submitted
If you have already submitted a SAR yourself and received a response, we can review and analyse what has been provided independently of any drafting instruction. We identify what is significant, flag what appears to be missing or improperly withheld, and provide a written summary of findings and recommended next steps, whether that is an ICO complaint, a LeO complaint, or a further challenge to the firm directly.
03
SAR to challenge overcharging or a costs dispute
Where you believe your solicitor overcharged, failed to provide adequate costs information, or billed for work that was not done or not done well, a SAR can obtain the underlying time recording data and billing records. This information is essential for any substantive challenge to a bill and is frequently not provided without a formal request.
06
Challenging an inadequate or delayed response
If your solicitor has failed to respond within 30 days, provided an obviously incomplete disclosure, or claimed exemptions they cannot properly justify, we help you draft a formal challenge. Solicitors are regulated professionals. A properly drafted challenge letter that references both GDPR obligations and SRA conduct standards frequently produces a more complete response without the need to escalate to the ICO.
HOW IT WORKS
Four steps. No uncertainty.
01
Get your fixed price
Answer a short set of questions about your situation and select the level of support you need. The calculator gives you an exact fee before you pay anything. Not a range. Not an estimate.
02
Consultation and Drafting
Pay and book your consultation. We scope the request carefully to your specific complaint, draft the SAR addressed to the firm's data controller, and provide full submission guidance. If you have opted for the response review only, send us the disclosure and we begin from there.
03
Firm responds
Your solicitor has 30 days to provide their disclosure. If they request an extension, seek clarification, or fail to respond, we advise you on the appropriate next step. When the response arrives, send it directly to us if you have instructed the response review.
04
Findings and next steps
We review the full disclosure, identify what is significant, flag what is absent or improperly withheld, and deliver a written summary of findings and recommended next steps; whether that is a Legal Ombudsman complaint, an SRA referral, an ICO complaint, or a direct challenge to the firm.
Why Safeguard Legal
We know what to look for — because we know how law firms manage their files and their complaints.
Built inside regulated practice
Our work is grounded in 17 years of experience across regulated law firms, including senior practice management and direct involvement in how firms manage client files, billing, and complaints. We know what a complete solicitor disclosure looks like and what a deficient one is designed to obscure
Law Society accredited
Our principal holds Law Society accreditation in Employment Law and Family Law. Micro-credentials that are independently verified credentials, not self-assessed. This is the standard against which our work is calibrated.
Fixed fee, not hourly
You know the cost before you commit. There are no hourly billing surprises, no revision fees, and no ambiguity. The fee is calculated on the specifics of your case and agreed upfront.
"A subject access request to a law firm almost always produces more than the client expected. The billing records alone tell a story. Combined with internal correspondence and attendance notes, the full picture of how the matter was managed is rarely what the firm described in its complaints response."
FREQUENTLY ASKED QUESTIONS
Questions people ask before booking
What must a solicitor include in a SAR response?
Your solicitor must provide all personal data they hold about you as an identifiable individual. In the context of a client file, this means correspondence on your behalf, attendance notes and file notes, internal communications between fee earners in which you are named or discussed, billing records and time entries, counsel instructions and advices (subject to privilege), complaints handling records, and any other documentation that relates to you. The obligation extends to data held in any format or system, including emails, electronic case management systems, and any other platform. The firm may claim legal professional privilege over certain documents and may redact information relating to identifiable third parties, but they must identify what has been withheld and explain why.
How long does a solicitor have to respond to a DSAR?
Under UK GDPR, a solicitor has one calendar month from the date they receive the request to provide their response. They may extend this to three months where the request is particularly complex, but they must notify you of the extension within the initial one-month period and explain why it is needed. Failure to respond within the statutory timeframe is a breach of UK GDPR, reportable to the ICO, and also a potential conduct matter under the SRA Code of Conduct.
Can a solicitor refuse a SAR?
A solicitor cannot refuse a SAR outright. They may decline to provide specific documents where a legitimate exemption applies, most commonly legal professional privilege or third party privacy, but they must still respond, identify what they have withheld, and explain the basis. A blanket refusal, an unacknowledged request, or a response that is obviously incomplete are compliance failures. As regulated professionals, solicitors have additional obligations that make inadequate responses to SARs particularly significant. An ICO complaint and an SRA referral can run concurrently where both data protection compliance and professional conduct are in question.
How does a SAR support a Legal Ombudsman complaint?
The Legal Ombudsman will assess your complaint against what the firm's own records show. A SAR submitted before you lodge a LeO complaint means you approach the process with the same information the firm will rely on; attendance notes, internal correspondence, billing records, and complaints handling documentation. Discrepancies between the firm's formal response to your complaint and what their internal records show are among the most powerful findings in a LeO matter, and they only become visible when you have the file
I already submitted a DSAR myself. Can you still help?
Yes. If you have already submitted a DSAR and received a response, the response review is available as a standalone instruction. We review and analyse the disclosure, identify what is significant, flag what appears to be missing or improperly withheld, and provide a written summary of what the disclosure means for your matter and what your options are. Please contact us to confirm the scope before booking.
I already submitted a SAR myself. Can you still help?
Yes. If you have already submitted a SAR and received a response, the response review is available as a standalone instruction. We review and analyse the disclosure, identify what is significant, flag what appears to be missing or improperly withheld, and provide a written summary of what the disclosure means for your complaint and what your options are. Please contact us to confirm the scope before booking.
Will sending a SAR affect my relationship with the firm?
If you are considering a complaint about a solicitor, the relationship is already in difficulty. A SAR submitted in that context is a signal that you understand your rights and intend to exercise them, and that signal is understood by the firm. If the relationship is ongoing and you are still instructing the firm, that is a relevant factor in how and when the request is submitted. The consultation will help you consider the timing and approach in the context of your specific situation.
Is this service confidential?
Yes. Everything you share with us is held in strict confidence and used only for the purpose of preparing your document. We do not share your information with any third parties. Full details are set out in our Privacy Policy.
What if my situation turns out to be more complex than I thought?
The triage calculator identifies complexity before quoting. If your matter falls outside our standard scope because of volume, complexity, or urgency then you will be told immediately and directed to the appropriate support. If additional complexity emerges during the consultation, we will discuss this with you openly before proceeding.