Whether you are experienced in dealing with Data Subject Access Requests (DSARs) or have just received your first following the introduction of the General Data Protection Regulation (GDPR), we can help you deal with it in an easy, quick and cost effective way.
Increase in DSARs
DSARs made in the employment context are becoming increasingly common – often being brought by an employee, former employee or even an applicant for employment. Whatever the scenario, we can help.
Under the GDPR, an individual can make a DSAR at no personal cost. Sitting alongside this, the pressure on employers to compile, review and present the information requested within the new time limits, has never been greater.
We can help – our response toolkit
We offer a full range of services to any business that needs help with DSARs.
Our response toolkit can be tailored to your specific needs, including advising on the request from start to finish or simply providing ad hoc strategic input for dealing with a tricky request. Within our toolkit we can help you with:
- Training for your HR team or wider workforce
- Documentation – including (template or review of existing) policies and response letters
- Advising on the legitimacy and scope of a DSAR, including tactics for narrowing the scope of a DSAR
- Advising on the internal processes for dealing with DSARs
- Practical advice on searches
- Document review and redaction
- Advising on tricky issues (such as, how to treat the data of third parties and other data that can be legitimately withheld from the data subject)
- Dealing with the Information Commissioner’s Office and other regulators
- Strategic input and risk management (for example, in the context of a grievance or litigation)
Coping with the sheer volume of documents a DSAR can reveal, can lead to questions about resourcing. Engaging with an electronic review platform can assist with this.
We work with a number of providers to provide the most suitable and cost effective service to our clients. We can also work with your own preferred provider, or in-house platforms.