Data Subject Access Requests

 

Does/would your business struggle to manage extensive Data Subject Access Requests?

UK Data Protection Index figures show there has been a 66% increase in DSARs received since July 2020 as employees, clients and customers have become more aware of who is using their personal data and why. Meanwhile, many HR personnel are already struggling to manage their increased workloads because of the Covid-19 pandemic, leading to overstretched resources and staff burnout.

What makes DSARs so complicated?

In an employment context, a disgruntled employee may bring a DSAR to gather evidence for a claim with the hopes of securing an exit package. For uncomplicated, infrequent projects in-house redaction may well be an option, however, for larger projects it usually pays to benefit from a more experienced outsourced team.

Organisations must now respond to a DSAR within 30 days, yet most in-house teams do not have efficient processes in place and find themselves facing the following roadblocks:

  • Attempting to organise digital and hard copy data sources held in multiple locations, often going back years.

  • Additional layers of complexity thanks to the increasing use of networks such as Microsoft Teams and evolving cloud-based IT infrastructures.

  • Weak retention policies leading to more information about an individual on file than is necessary, resulting in companies wasting valuable time - and money – sifting irrelevant material.

How can Starford help you manage DSARs more effectively?

We recognise all the challenges presented above and can offer organisations an expert blend of strategic advice, legal support, and practical assistance. Our employment lawyers have a wealth of experience in handling DSARs and can flag any potentially contentious documents that could expose the client to a specific legal risk. We also have specifically trained support staff who assist our lawyers in reviewing documents before they go out to the Data Subject. This enables us to provide a cost-effective and efficient service with fees starting from just £2 per document. Unlike many other companies, the cost of hosting the data is also included in our fees.

What our service covers

  • Reviewing and assessing the nature and validity of the DSAR

  • Support from a senior employment lawyer throughout to advise on the scope of the request and agree a strategy (including an initial response)

  • Verifying the requestor's identity

  • Liaising with the single point of contact within your organisation to locate the relevant data and to acquire all the personal information relating to the individual

  • Screening the collated data

  • Review and redaction of documentation by our specialist staff with second level review by a more senior employment lawyer

  • Applying lawful exemptions, if applicable

  • Formally disclosing the information to the requester. Our redacted end-product is guaranteed irreversible

  • Documenting the facts relating to the DSAR

  • Liaising and interacting directly with the Information Commissioner’s Office (ICO)

  • A senior employment lawyer drafting a substantive response to the request and enclosing the results 

If you would like to discuss our DSAR packages in more detail, please contact our team on 01342 347063 or email julie.jones@starfordlegalhr.com. You can also view our full range of employment law, HR consultancy and management consultancy services here.