Has GDPR increased your subject access requests?

What are subject access requests?

Put simply a subject access request (SAR) is a request made by, or on behalf of, an individual to find out what personal data you hold about them, why you hold it and who you disclose it to. 

The right for individuals to make these requests is not new, however, the introduction of the European Union’s General Data Protection Regulation (GDPR) and the UK’s Data Protection Act 2018 have given rise to a number of important changes that are having a significant impact on some organisations:

• the £10 fee chargeable to the individual raising a request has been removed in most circumstances
• the time to respond has been reduced from 40 days to one month
• the request no longer needs to be in writing, which means it can now also be made over the phone, in person or via social media

Please visit the Information Commissioner’s Office website to learn more. 

How we can help you

Whether you are looking for a standalone solution to help you manage the requests, or would like to consider it as part of a wider requirement our eDisclosure Services framework can help you. 

By outsourcing elements of the requirement you will:

• be better placed to meet time limits imposed under GDPR
• save money 
• remove the administrative and legal burden 

Redaction of third party data

By far the most complex area of subject access requests is the redaction of third party information before releasing documents. Depending on the source information this can be legally complex, and sometimes needs specific expertise and knowledge to ensure it is completed in the correct way.

All our framework suppliers have proven methodologies, expertise and technology to help eliminate the risk of human error, which can lead to significant financial penalty.

Find out more

If you would like to learn more about how we can help you:

Visit the framework page

Email info@crowncommercial.gov.uk

Call 0345 410 2222