Dealing with a SAR

Video 20 of 32
1 min 30 sec
Want to watch this video? Sign up for the course or enter your email below to watch one free video.

Unlock This Video Now for FREE

This video is normally available to paying customers.
You may unlock this video for FREE. Enter your email address for instant access AND to receive ongoing updates and special discounts related to this topic.

Understanding Subject Access Requests (SARs)

Individual Rights and SARs

Right to Request: Every individual has the right to confirm data processing and obtain copies of their personal data, including supplementary information.

Recognition and Reporting

Recognition: It's crucial to identify SARs promptly and report them to the appropriate department without delay.

Forms of Request

SARs can come in various forms:

  • Telephone calls
  • In-person requests
  • Emails
  • Letters
  • Social media messages

Recognition Criteria

Identification: SARs may not explicitly mention "Subject Access Request" but must clearly indicate a request for personal data. Record the individual's full name and, if possible, another identifying detail like email or postcode.

Timely Reporting

Procedure: Note the time, date, and details of the SAR, then report it promptly to the relevant authority within your organization.

Response Time and Conditions

Deadline: Organisations have one calendar month to respond to SARs.

Charges and Refusals: In most cases, no fee can be charged, and requests cannot be refused unless they are repeated, excessive, or manifestly unfounded.