Handling SARs now and after May (a UK perspective)

Privacy and Data Protection Journal

"Under section 7 of the current UK Data Protection Act 1998 (the ‘DPA’), upon the submission of a valid subject access request (‘SAR’) to a data controller, an individual has the right to obtain a description of the personal data being held on them, the purposes for which the data are held, and the recipients of the data. For the request to be valid, it must be in writing, and include the relevant fee (if charged by the controller)."

Read the article

Related Contacts
Ann Bevitt Partner London
Related Practices & Industries