Data Subject Access Requests
Has your organisation received a Data Subject Access Request (DSAR)?
As leading Digital Forensic and eDisclosure experts, CYFOR has the necessary expertise to efficiently locate data related to an individual and ensure relevant documents are ready for disclosure.
The use of electronic devices is constantly increasing and therefore, so is the amount of data being generated. Under regulations such as the Global Data Protection Act (GDPR), individuals are becoming increasingly aware of their personal data protection and privacy rights. Furthermore, the appetite for understanding how personal data is controlled, processed and distributed is also on the rise.
A Data Subject Access Request (DSAR) is a formally written request (via email, letter, fax or social media) for personal information. They are often used by individuals who want to be provided with any personal information an organisation holds about them. For example, an employee may send a DSAR to an employer as part of a grievance, disciplinary or employment tribunal process. The personal information that an individual can request usually includes:
The European Commission defines personal data as any information that relates to an identified or identifiable living individual. Multiple pieces of information when collected together can lead to the identification of a particular person, so would also constitute personal data.
Data controllers are required to comply with the request promptly and within 1 month of receipt of the request. As individuals become more and more aware of this right, clients are coming under increasing pressure to deal with these requests in accordance with the Data Protection Act. Dealing with Data Subject Access Requests (DSARs) can be a complex and time-consuming task, particularly if the volume of personal data held by the organisation is extensive and/or if it is held in various formats across a range of systems that may not be corresponding with each other.
As leading digital forensics and electronic disclosure experts, we have a range of advanced online review platforms specifically designed to search, filter and process large volumes of electronic data. Utilising these platforms, which incorporate advanced keyword filtration technology, we can search across any of your chosen systems to recover any information you require. CYFOR can also digitally redact any relevant documents that contain sensitive information not disclosable to the data subject (e.g. they may be legally privileged or contain information about another individual).
Our DSAR workflow outlines the core elements of the processes undertaken to validate, collect, process, host and review data.
We can also provide a data flow map, which is designed to help you understand the general flow of personal data through your business, allowing you to improve efficiency in DSAR and GDPR compliance.