How to Submit a Subject Access Request to HSBC UK
Under UK GDPR you can ask HSBC UK for a copy of the personal data they hold about you. Here's the right way to ask, and a free tool that writes the letter for you.
Skip the writing — generate your letter now
Free, no account needed. Fill in your details and get a correctly worded letter addressed to HSBC UK, ready to send yourself.
Generate my letter to HSBC UK →What you're entitled to ask for
This is called a Subject Access Request (SAR). HSBC UK must give you a copy of your personal data, tell you why they hold it, who they've shared it with, and how long they'll keep it — free of charge, within one calendar month.
How to contact HSBC UK
The most reliable route is to send your request by post. A postal address is also accepted as a fallback: FAO Data Protection Officer, Customer Service Centre, BX8 1HB.
Note: No public direct email found — post or phone 03457 404 404.
What happens next
HSBC UK may ask you to verify your identity before responding — this is normal. Once your request (and identity, if needed) is confirmed, the one-month clock starts. If the deadline lands on a weekend or bank holiday, it rolls to the next working day.
Common questions
Is there a fee to request my data from HSBC UK?
No — under UK GDPR, organisations including HSBC UK must provide a copy of your personal data free of charge in almost all cases.
How long does HSBC UK have to respond?
One calendar month from the day they receive your request, or from the day your identity is confirmed if they need to verify it first.
What's the best way to contact HSBC UK about this?
The most reliable route is to send your request by post. A postal address is also usually accepted as a fallback.
What if HSBC UK doesn't respond in time?
You can complain to the Information Commissioner's Office (ICO). Right-of-access complaints made up 39% of all complaints in the ICO's Annual Report 2023/24 — more than any other category, around 15,000-15,800 in a single year.
For guidance only — this isn't legal advice, and DataDeadline isn't a party to your request or a representative for HSBC UK. Verify anything deadline-critical against current ICO guidance.