If your organisation regularly receives subject access requests and you struggle to keep up with responding, our eDisclosure Services framework can help you.
What are subject access requests?
Put simply a subject access request (SAR) is a request made by, or on behalf of, an individual to find out what personal data you hold about them, why you hold it and who you disclose it to.
The right for individuals to make these requests is not new, however, the introduction of the European Union’s General Data Protection Regulation (GDPR) and the UK’s Data Protection Act 2018 have given rise to a number of important changes that are having a significant impact on some organisations:
- the £10 fee chargeable to the individual raising a request has been removed in most circumstances
- the time to respond has been reduced from 40 days to one month
- the request no longer needs to be in writing, which means it can now also be made over the phone, in person or via social media
Please visit the Information Commissioner’s Office website to learn more.
How we can help you
Whether you are looking for a standalone solution to help you manage the requests, or would like to consider it as part of a wider requirement our eDisclosure Services framework can help you.
By outsourcing elements of the requirement you will:
- be better placed to meet time limits imposed under GDPR
- save money
- remove the administrative and legal burden
Redaction of third party data
By far the most complex area of subject access requests is the redaction of third party information before releasing documents. Depending on the source information this can be legally complex, and sometimes needs specific expertise and knowledge to ensure it is completed in the correct way.
All our framework suppliers have proven methodologies, expertise and technology to help eliminate the risk of human error, which can lead to significant financial penalty.
Find out more
If you would like to learn more about how we can help you:
Visit the framework page
Call 0345 410 2222