Subject Access Requests

Subject Access Rights are the single biggest obligation that could overwhelm organisations. While Subject Access Requests or SARs are not a new concept in Data Protection, data subject’s rights have changed somewhat under the GDPR. Article 12 of the GDPR ‘sets the tone’ for it all and in the case of SARs, the times limits to supply data has been reduced from 40 days to 1 calendar month or 30 days. No charge can be made to supply this information and access requests can be made electronically. Organisations must be able to supply information about where the data come from, the purposes of processing, who the data is shared with and where the data resides geographically.

In this video Clare Murphy of Castlebridge Associates explains the easiest way to deal with Subject Access Requests…

Want to know more about Data Protection and the GDPR – view 2 videos on both on