This video is normally available to paying customers.
You may unlock this video for FREE. Enter your email address for instant access AND to receive ongoing updates and special discounts related to this topic.
Right to Request: Every individual has the right to confirm data processing and obtain copies of their personal data, including supplementary information.
Recognition: It's crucial to identify SARs promptly and report them to the appropriate department without delay.
SARs can come in various forms:
Identification: SARs may not explicitly mention "Subject Access Request" but must clearly indicate a request for personal data. Record the individual's full name and, if possible, another identifying detail like email or postcode.
Procedure: Note the time, date, and details of the SAR, then report it promptly to the relevant authority within your organization.
Deadline: Organisations have one calendar month to respond to SARs.
Charges and Refusals: In most cases, no fee can be charged, and requests cannot be refused unless they are repeated, excessive, or manifestly unfounded.