Since the introduction of the GDPR in May last year individuals have become much more aware of their rights of access to their personal data. It is therefore extremely important that you have a clear action plan in place to process SARs within the short statutory timescale and so avoid fines or censure.
This article includes information on:
- The requirements
- Can you extend the statutory time period
for response? - What are data subjects entitled to?
- Do you have to send a full copy of
everything on the file? - Remind Employees to take care
- What if the data includes information on
other individuals? - Can you refuse a request?
- Exemptions
- What should you do when you refuse to
comply with a request? - What if the client is deceased?
- What form of response?
- The response
- What if the Data Subject complains to
the ICO regarding a SAR? - Top Tips
Click on the right hand side to download the full article.