January 16, 2018

How to respond to a data subject access request (DSAR)

Top tips on responding to a Data Subject Access Request

  • Consider whether the request provides sufficient information to identify the individual and the relevant data
  • Decide the search parameters and conduct the search
  • Assess whether the data comes within the scope of the DSAR
  • Consider whether any exemptions apply and whether to obtain any third party consents
  • Respond within the one month time limit
  • Keep and review a log of DSARs, with details of the steps and decisions taken