Manchester: 0161 797 8123

London: 0207 438 2045

Manchester: 0161 797 8123

London: 0207 438 2045

Corporate Investigations

Data Subject Access Requests

Senior Executive Leavers

Has your organisation received a Data Subject Access Request (DSAR)?

As leading Digital Forensic and eDisclosure experts, CYFOR has the necessary expertise to efficiently locate data related to an individual and ensure relevant documents are ready for disclosure.

What is a Data Subject Access Request (DSAR)?

The use of electronic devices is constantly increasing and therefore, so is the amount of data being generated. Under regulations such as the Global Data Protection Act (GDPR), individuals are becoming increasingly aware of their personal data protection and privacy rights. Furthermore, the appetite for understanding how personal data is controlled, processed and distributed is also on the rise.

A Data Subject Access Request (DSAR) is a formally written request (via email, letter, fax or social media) for personal information. They are often used by individuals who want to be provided with any personal information an organisation holds about them. For example, an employee may send a DSAR to an employer as part of a grievance, disciplinary or employment tribunal process. The personal information that an individual can request usually includes:

  • Confirmation about whether any personal data is being processed about them.
  • A description of the personal data.
  • The reasons the data is being processed.
  • Whether the data is shared with any other organisation or people.
  • Copies of information comprising the data.
  • Details of the source of the data (where the data is available).

What is classified as personal data?

The European Commission defines personal data as any information that relates to an identified or identifiable living individual. Multiple pieces of information when collected together can lead to the identification of a particular person, so would also constitute personal data.

Data controllers

Data controllers are required to comply with the request promptly and within 1 month of receipt of the request. As individuals become more and more aware of this right, clients are coming under increasing pressure to deal with these requests in accordance with the Data Protection Act. Dealing with Data Subject Access Requests (DSARs) can be a complex and time-consuming task, particularly if the volume of personal data held by the organisation is extensive and/or if it is held in various formats across a range of systems that may not be corresponding with each other.

How can CYFOR assist you?

As leading digital forensics and electronic disclosure experts, we have a range of advanced online review platforms specifically designed to search, filter and process large volumes of electronic data. Utilising these platforms, which incorporate advanced keyword filtration technology, we can search across any of your chosen systems to recover any information you require. CYFOR can also digitally redact any relevant documents that contain sensitive information not disclosable to the data subject (e.g. they may be legally privileged or contain information about another individual).

Data Subject Access Request Workflow

Our DSAR workflow outlines the core elements of the processes undertaken to validate, collect, process, host and review data.

We can also provide a data flow map, which is designed to help you understand the general flow of personal data through your business, allowing you to improve efficiency in DSAR and GDPR compliance.

 

 

  • Data Subject Access Request: The data subject makes a request to an organisation. This can be done verbally, in writing, or via email.
  • Validation: The organisation determines whether the request is valid, and confirms the identity of the requester. They can then provide CYFOR with all data for interrogation.
  • Data Collection: Data can be provided via secure file transfer, onsite acquisition by a CYFOR expert, or by the collection of a physical storage device.
  • Data Processing: Data is processed, de-duplicated and indexed. Indexing gives you the ability to run keyword searches over the extracted data, enabling identification of personally identifiable information.
  • Data Hosting: Once keyword responsive documents have been identified, they are uploaded to our online review platform and are available for review and redaction.
  • Document Review: CYFOR will review documents for Legal Privilege and other subject’s personally identifiable data.
  • Production: Once the documents have been reviewed and redacted, CYFOR will provide production of the relevant documents that can be provided to the data subject.

We are instructed by both law firms and companies directly. Contact us today to secure your data.

London: 0207 438 2045

Manchester: 0161 797 8123

Manchester: 0161 797 8123

London: 0207 438 2045

We are instructed by both law firms and companies directly. Contact us today to secure your data.

London: 0207 438 2045

Manchester: 0161 797 8123

Manchester: 0161 797 8123

London: 0207 438 2045

Feel free to send us an enquiry

  • This field is for validation purposes and should be left unchanged.

After submitting an enquiry, a member of our team will be in touch with you as soon as possible

Your information will only be used to contact you, and is lawfully in accordance with the new General Data Protection Regulation (GDPR) act, 2018.