Subject Access Requests

I am writing a protocol for use when dealing with requests to see personal data held by the organisation.

Do you ask people to complete a standard form? I believe this may help in clarifying what personal information the individual is seeking and why.

If any of you have a written procedure and/or use a standard form are you willing to share this with me?