In recent years, organisations in the UK have faced an increasing number of Subject Access Requests (SARs). Many business owners dislike SARs due to the administrative time they take up and the complexity of the relevant rules within the General Data Protection Regulation (GDPR). Pressure also results from the Information Commissioner’s Office (ICO) having the power to issue fines of up to \u00a317.5m on any organisation that fails to deal with a SAR correctly. This article will explore the main types of documents your business should disclose following receipt of a SAR. This should help your business avoid committing a GDPR breach and any subsequent financial penalty from the ICO.<\/p>\n\n\n\n
A SAR is a (usually written) request from an individual for a copy of all personal information relating to them. The SAR<\/a> usually states whether the individual wishes for digital or printed copies of the data. Some individuals will label them as a Data Subject Access Request or DSAR.<\/p>\n\n\n\n There are two main types of SAR:<\/p>\n\n\n\n The rules for dealing with both are the same, though you are likely to disclose fewer documents in response to a targeted SAR.<\/p>\n\n\n\n The core rules include the following:<\/p>\n\n\n\n Now we know the nature of a SAR and the core rules, let us consider which documents your organisation should disclose in response to a SAR.<\/p>\n\n\n\n\n\n Continue reading this article below the form\n <\/i>\n<\/a>\n\n
What Rules Should My Company Comply With?<\/h2>\n\n\n\n
\n