A Data Subject Access Request (DSAR) is often the first step in challenging a CIFAS marker. Under the UK GDPR and Data Protection Act 2018, you have the right to know what personal data an organisation holds about you, how it is used, and who it is shared with.
This makes the DSAR a powerful tool for uncovering the evidence behind a marker.
Why a DSAR Matters #
A CIFAS marker is not a conviction — it is an entry based on evidence provided by a member organisation. The DSAR allows you to see that evidence and test whether it meets the Standard of Proof.
Through a DSAR you can:
- Confirm which organisation filed the marker.
- See the case type (e.g. False Application, Misuse of Facility).
- Review the documents or information the bank relied on.
- Check whether your data is accurate and up to date.
If the evidence is weak, unclear, or inaccurate, you can use this as the foundation for removal.
Who to Send a DSAR To #
- The Bank or Organisation that Filed the Marker – They must provide you with the evidence they relied on.
- CIFAS Directly – CIFAS can provide you with a copy of your National Fraud Database record.
How to Make a DSAR #
A DSAR does not need complicated legal language. A simple written request is enough.
Sample Wording #
“I am making a Data Subject Access Request under Article 15 of the UK GDPR. Please provide me with all personal data you hold about me, including any records shared with CIFAS or the National Fraud Database. Please include all documents, notes, correspondence, and evidence used to support the decision to file a CIFAS marker against me.”
Timeframes and Costs #
- Organisations must respond within one month.
- In complex cases, they can extend this by a further two months, but must explain why.
- DSARs are free of charge, unless your request is manifestly unfounded or excessive (rare in CIFAS cases).
What to Do Next #
Once you receive your DSAR:
- Check if the evidence meets the four pillars of the Standard of Proof.
- Look for signs of error, disproportionate action, or missing context.
- Use this information in your complaint or escalation to CIFAS, the Ombudsman, or court.
Key Takeaway #
The DSAR is your entry point to challenging a marker. It forces transparency and gives you the evidence needed to argue that the marker is unfair, inaccurate, or disproportionate. Without it, you are fighting blind.
