Logo

DSAR Management

Home / DSAR Management Services

Management of Data Subject Access Requests (DSARs)

Data protection legislation provides individuals (the data subject) with a number of rights with regards to their personal data.  These rights under Articles 12-23 of the UK (EU) GDPR can be used to:

Request that their data be deleted.

Request to be informed of what personal data about them is processed.

Request access to the information that is about them.

Request that data is transferred to another Data Controller.

Request that any inaccurate data is rectified.

Note – The above are the most popular rights that data subjects use under the data protection legislation.  All organisations must comply with these rights and there are a number of legal requirements to follow in order to demonstrate compliance.

Note – we can provide discounts for charities, contact us for more information.

DPO

Need help with managing a request?

Why outsource your DSAR management?

Managing a complex DSAR is difficult and time consuming

Many DSARs are complex, requiring significant resources and time to manage.  Our service is designed to minimise that overhead for our clients whilst ensuring that they meet their legal requirements.

What does the service cover?

Liaison with the Data Subject

There are strict requirements when if comes to communication with the data subject making the request.

We can either manage this on your behalf or ensure that your internal team are addressing the requirements relating to:

  • Identification
  • Residency
  • Communication methods
  • Managing expectations
Scope and Minimisation

Some data subjects are requesting a huge amount of data over a very long time scale.

We use our experience to try and minimise the scope to reduce your overhead on the production and collation of the request data.

Data Collation Advice and Guidance

We have years of experience in managing DSARs. Our team will advise you on the best approach to collating the request data.

We can also advise on how to address the requirements on data protection for existing employees and partners that may be involved in the requested data set.

Data Redaction

There are strict rules to follow with regards to the appropriate redaction of personal data from the data set.

This is based upon the legal requirement to adhere to the rights and freedoms of other individuals when dealing with the request.

Note – we use the same software tool-set that many police forces use to redact the data prior to communication to the data subject.

Request Tracking and Delivery

There are legal requirements relating to the tracking and data delivery of the output from the DSAR.

We undertake this task on your behalf to ensure that your organisation is compliant with the legislation.

How do we support our clients?

Our service is based upon the handling of a specific request. 

We review the request details with a prospective client and then we can provide a high level estimate of what’s involved and how much it may cost for us to manage this on their behalf.

DSARs can take literally weeks of effort and are often highly complex in nature.  Our specialists can remove the hassle of managing this and allow our clients to focus on their business operations.

DSARs and how to demonstrate compliance

Effective Preparation

There needs to be a policy and procedure in place for managing DSARs. This must include training for staff and a tracking mechanism.

Follow The Rules From The Start

Do not attempt to bypass the basic rules of managing DSAR's. This can back-fire and cause you to be in breach of the data protection legislation.

Plan and Manage Data Collation

Put together a proper plan for the data collation phase of the request process. Effective planning can save significant time and money.

Effective Data Redaction

Do not short-cut the redaction process. Allowing data to be accessed that should remain confidential is an obvious breach of data protection.

Current Incentives

We are offering discounts of 10% for small DSAR requests  of 15% for larger DSAR requests

Our Certifications

Certifications

Schedule a Call

Contact Us

DSAR Management Contact Us
First
Last
Data Protection

Thank you for contacting us

We will respond shortly

Note – if you do not receive an email from us please check your spam folder as we normally respond within 2 hours.