Data Subject Access Request under the GDPR

Increase in DSARs

DSARs made in the employment context are becoming increasingly common – often being brought by an employee, former employee or even an applicant for employment. Whatever the scenario, we can help.

Under the GDPR, an individual can make a DSAR at no personal cost. Sitting alongside this, the pressure on employers to compile, review and present the information requested within the new time limits, has never been greater.

We can help – our response toolkit

We offer a full range of services to any business that needs help with DSARs.

Our response toolkit can be tailored to your specific needs, including advising on the request from start to finish or simply providing ad hoc strategic input for dealing with a tricky request. Within our toolkit we can help you with:

• Training for your HR team or wider workforce
• Documentation – including (template or review of existing) policies and response letters
• Advising on the legitimacy and scope of a DSAR, including tactics for narrowing the scope of a DSAR
• Advising on the internal processes for dealing with DSARs
• Practical advice on searches
• Document review and redaction
• Advising on tricky issues (such as, how to treat the data of third parties and other data that can be legitimately withheld from the data subject)
• Dealing with the Information Commissioner’s Office and other regulators
• Strategic input and risk management (for example, in the context of a grievance or litigation)

Review platforms

Coping with the sheer volume of documents a DSAR can reveal, can lead to questions about resourcing. Engaging with an electronic review platform can assist with this.

We work with a number of providers to provide the most suitable and cost effective service to our clients. We can also work with your own preferred provider, or in-house platforms.

Next steps

To find out more and to discuss your requirements, please get in touch with Razia Begum or Rachel Ashwood. Or for more information about our HR Data Protection and GDPR Toolkit, click here.