How to Manage Data Subject Access Requests (DSARs)

The General Data Protection Regulation (GDPR) gives individuals (data subjects) the right to access any personal data that is processed by an organisation.  When individuals request a copy of this data, it is known as a Data Subject Access Request (DSAR).  Right of access is one of the key rights the GDPR provides individuals with and failure to adequately respond to a DSAR can result in significant penalties from the Information Commissioner’s Office (ICO), the UK’s regulator.  URM’s 1-day DSAR course will address all aspects of DSARs and teach you how to properly respond to them.   

Although some basic knowledge of data protection (DP) legislation and terminology would be useful, there are no mandatory perequisites for attending the course. 

URM’S DSAR TRAINING COURSE WILL TEACH YOU: 

• What the rights of access to personal data are and what a DSAR is 
• How to recognise a DSAR and determine whether it’s valid or not 
• All the key stages in dealing with a DSAR, from ‘acknowledgement’ to ‘completion’ 
• How to liaise with an individual when seeking to clarify a DSAR 
• How to verify the identification of a data subject 
• The timescales for responding to a DSAR, and when it is possible to extend the response time 
• What is redaction and how you go about redacting information? 
• What is disclosable, e.g., a name alone is not always personal data 
• When you are not legally obliged to release data, i.e., dealing with exemptions 
• How to deal with unfounded or excessive requests 
• How to respond to a data subject and complete a DSAR 
• What to do if the data subject complains to the ICO. 

HOW IS THE COURSE DELIVERED? 

URM’s DSAR Training Course leans heavily on exercises, discussion and real-life scenarios.  With a focus on practical application, the course is designed to help you understand how to manage and respond to DSARs in your work environment.  The online course is also designed to encourage debate and the sharing of knowledge and experience. 

The course runs from 9:30 am to 4:30 pm with 45 minutes for lunch and a 10-minute break in the morning and afternoon. 

Why Train With URM? 

• We believe URM is set apart from other DP training providers by the calibre of our trainers. All of our trainers adopt a facilitative approach, the goal of which is maximising knowledge and skills sharing across the group. 

• URM’s trainers are all practising DP consultants, who are highly experienced in dealing with DSARs, conducting DPIAs and dealing with data breaches. They will leverage this experience throughout the course, allowing you to benefit from their comprehensive knowledge and expertise.  
• One area in which URM is particularly proficient is DSAR redaction.  We have established numerous DSAR response teams and trained DP team members to become confident and able redactors. 
• With our long track record of successful DSAR management and DP consultancy, we can translate best practice theory into real-world applications.