When your organisation receives a request from a data subject exercising their rights to access their personal data (also known as a ‘Data Subject Access Request’ or ‘DSAR’) it can be challenging to know where to begin.

Our lawyers can guide you through determining whether or not it is necessary to comply with the DSAR, the timeframes for doing so, and to guide you in conducting searches, reviewing disclosure and applying any exemptions that may be relevant, before responding to the requestor in a timely manner. We can also assist with any complaints and escalations to the Information Commissioner’s Office (ICO) and/or a Court.

We are also adept at helping you deal with the exercise of other rights, such as the Right to be Forgotten, and requests to amend, restrict, port data or object to data processing.