Handling Subject Access Requests
One day online
Online course dates
- 6 June 2023, 0930-1630, delivered via MS Teams by Frank Rankin
Cost - £375 + VAT per participant
Article 15 of UK GDPR (and, for personal data processed for law enforcement, s45 of the Data Protection Act 2018) provide wide ranging rights of access to personal data.
This course explores the scope of subject access rights and looks at the practicalities of complying with requests, ICO guidance and best practice.
6 hours CPD
OBJECTIVES
Course Content
Key concepts and law
Key concepts and definitions and understanding what information is in scope for a SAR. Contents of ICO guidance. Overview of other subject rights.
The information search
Conducting a robust but proportionate information search. Narrowing the request. Search audit trail.
Handling requests
Checking ID. Third party requests. Tracking, monitoring and managing the process. Timescales. The information search. Content of responses. Rights of appeal to the Information Commissioner.
Exemptions and redactions
Overview of key exemptions from the rights of access in the Schedules of the Data Protection Act 2018, the concepts of manifestly unfounded and excessive requests, and the practicalities of redaction.