The DfE have recently published updates to their Data Protection toolkit. Previously there had been very little guidance in the toolkit about how to respond to Subject Access Requests. There is now a specific section on this and an extra update about responding to other data rights requests such as changing, deleting or restricting of personal information.