Subject Access Requests
Has your organisation been approached with one or more Data Subject Access Requests? We have the expertise to acquire, process and analyse large volumes of data.
The increased usage of electronic devices has seen a prolific rise in the amount of data being generated. With the advent of stringent regulations such as the GDPR, individuals are now more aware of their rights and control how their data is processed and distributed. One such tool is the ‘Data Subject Access Request’.
A Subject Access Request (Also known as a Data Subject Access Request, DSAR or SAR) is a written request made on behalf of an individual for the information which they are entitled to ask for under section 7 of the Data Protection Act 1998 (DPA). This is also still valid under the new GDPR regulations.
It is often used by individuals who want the right to be provided with a copy of the information an organisation holds about them, which can include:
For information to be personal data, it must relate to a living individual and allow that individual to be identified from it (either on its own or along with other information likely to come into the organisation’s possession).
Data controllers are required to comply with the request promptly and within 40 days of receipt of the request. As individuals become more and more aware of this right, clients are coming under increasing pressure to deal with these requests in accordance with the Data Protection Act. Dealing with subject access requests can be a complex and time-consuming task, particularly if the volume of personal data held by the organisation is extensive and/or if it is held in various formats across a range of systems that may not be corresponding with each other.
As leading digital forensics and electronic disclosure experts, we have at our disposal a range of advanced online review platforms specifically designed to search, filter and process large volumes of electronic data. Utilising these platforms, which incorporate advanced keyword filtration technology, we can search across any of your chosen systems to recover any information you require.
CYFOR can digitally redact any relevant documents that contain sensitive information not disclosable to the particular data subject (e.g. they may be legally privileged or contain information about another individual).
We can also provide a data flow map, which is designed to help you understand the general flow of personal data through your business, allowing you to improve efficiency in DSAR and GDPR compliance.