Data Protection Training - post event version

Right of access – what

Right of access – what is a DSAR?An employee’s right of access is the right to obtain information fromtheir employer as to whether their personal data is being processed ornotIf personal data is being processed, the employee has the right to acopy of their personal dataA DSAR can be made verbally or in writing, by letter, email, or even viasocial mediaAn employer generally has 1 month to respond to a request but canextend by a further 2 months if the request is complex

What to consider on receipt of a DSAR?• The volume of data and whether you need to clarify therequest further• Where data is held and what searches you need to carryout• How to protect third party data• Whether exemptions apply which may mean thepersonal data is exempt, such as:‒ legal privilege‒ management forecasting / management planning‒ negotiations with the individual‒ confidential references about the individual