How to Respond to a Data Subject Access Request (DSAR)

Data subject access requests (DSARs) are made by individuals (data subjects) to an organisation asking for access to the personal data that is held about them.  Responding to DSARs can be onerous and time-consuming, but you cannot afford to take any shortcuts.  It is vitally important that DSARs are handled fairly and independently.  If your organisation receives a DSAR, do you know how to respond?  Are you aware of which derogations (exemptions or limitations to the rights of a data subject to access their personal data) need to be applied? In this webinar, URM will be sharing its experiences on assisting organisations, from a wide range of sectors, respond to DSARs in a way which ensures they fully meet their legal obligations under the GDPR.  Topics which we will address include:

• What constitutes a DSAR and what the legal requirements are when responding to a DSAR
• The key steps you need to take in responding to a DSAR
• How to appropriately consider context
• What you can do if you believe the request is vexatious
• What are derogations and how do you consider and apply them
• How do you consider redacting other personal data (i.e., not that of the data subject)
• Common failings we see in DSAR responses.