If you receive a Subject Access Request, you might not know what to do – we can help.
Data Protection is a complex topic, especially since the introduction of GDPR in 2018 (General Data Protection Regulation). One area of Data Protection that causes many of our clients concern is Subject Access Requests (SARs).
Both existing and ex employees can put in an SAR . You can no longer charge a fee for providing the data they ask for. Fees were abolished in 2018. You also have a more limited time-frame to provide information – down from 40 days to just one month. Fines for failing to respond to an SAR can be up to 4% of turnover so please don’t ignore any SARs you receive.
Some employers have difficulty with SARs because the guidelines on what to include are not black and white, there may also be third party information entwined in correspondence you think you should include. We have experience dealing with SARs so we can swiftly and efficiently respond, allowing you to get back to the day job.
Received a Subject Access Request? We can help …
- Jaluch is able to support with identifying the necessary documents and replying to the SAR for you if you lack resource or know how in your team. Please contact us for a quote.
- Our sister site Docs Wizard provides downloadable template documents, you can access a template subject access request form for use when you need to ask an (ex) employee to clarify what exactly they are requesting. (£99+ VAT for access to the full suite of essential template docs. £249+VAT for premium membership which also includes contracts, management guides and policies inc full data protection policy if you need to update what you have).
- On the top tips tab of that same site (no cost to view these) you can see our Top Tips for when you receive an SAR.
- We run GDPR workshops and have GDPR eLearning if you need a fuller understanding of data protection.