In the eye of a DSAR storm - Data Subject Access Requests in Consumer Activism
Handling Digital Subject Access Requests (DSARs) can require careful consideration of a range of digital and paper based information and documentation and the assessment of the rights of the requester and other persons identified in the information held.
It may be necessary to consider a range of potential exemptions which mean information should not be provided to the requester. A lack of familiarity with the relevant rules and exemptions can make this challenging.
Key things to consider:
- If your business is a regulated firm, you will also need to consider the requirements of your regulator.
- The DSAR process will need to be overseen by suitably senior members of staff with an appropriate understanding of the process and the relevant rules.
- DSARs must be fulfilled “without undue delay” and, at the latest, within one month of receipt of the request.
CyXcel's Legal Director Stewart Duffy and Weightmans Partner Louise Neave explore the key considerations on DSARs.