Practical tips for dealing with Data Subject Access Requests

Рет қаралды 3,484

iSTORM®️ Privacy-Security-Pentesting

Күн бұрын

Data Subject access requests don’t have to be an admin nightmare, check out our tips on how to improve the process and no, this isn’t about selling software solutions….
Help us reach 1000 subscribers - kzfaq.info...
iSTORM website: www.istormsolutions.co.uk
LinkedIn: / richard-merrygold-7856847
Company Linkedin: / intelligentstorm
Facebook: / dataprotectiondiaries

Пікірлер: 19

@martycrow Жыл бұрын

Good explanation and well balanced between the needs of a 'data controller' and 'data subject'. This is a vital topic that more people need to understand in order to create more transparent data architecture. Let the light in, I say!

@philbrown4930 2 жыл бұрын

Regardless of how well you might know or preach about a subject, there is always more to learn - thanks Rich

@iSTORMDiaries 2 жыл бұрын

High praise indeed, thanks Phil!!

@catherinemclean1116 2 жыл бұрын

Thanks so much Rich, really useful to hear this

@iSTORMDiaries 2 жыл бұрын

Thank you for the inspiration for the episode! :)

@Amelia-qm6bk Жыл бұрын

Many thanks Rich > appreciated

@JimmyHendrixJR Жыл бұрын

Excellent explanation!

@iSTORMDiaries Жыл бұрын

Thank you!

@chinthamansharmila1779 2 жыл бұрын

I loved the video, so insightful!

@iSTORMDiaries 2 жыл бұрын

Thank you!

@yagmursahin8832 2 жыл бұрын

Thank you.

@AuditingGlasgow 7 ай бұрын

How do i get all data held on record held about me examples prison doctors work schools etc

@iSTORMDiaries 7 ай бұрын

You need to do a subject access request to each organization. You can send the same letter. Keep it simple, provide your details and explain that you’d like a copy of your records under as per your right under the GDPR. They may ask for confirmation of ID or dates. I’d also title your email Subject Access Request. Good luck

@anniewilson2116 Жыл бұрын

I was refused my SARS from the care home my mother was in. The CEO of the we care group told me I know nothing about the law and will only deal with me through solicitors. I told him what I was entitled to and they have 28 days to respond which they had not.

@iSTORMDiaries Жыл бұрын

As long as you had either appropriate power of attorney or written permission to act on your mothers behalf, the request should not have been refused. In instances such as this, I always recommend being clear, providing what documentation you have and if all else fails, talking to the ICO as they can help you.

@GailJonesPolymerClay Жыл бұрын

If the data I require is from a third person ( ie a colleague) will they know?

@iSTORMDiaries Жыл бұрын

It very much depends on the circumstances. Most searches in an employment context are carried out without people knowing but if the data relates to an opinion or comment formed about you by someone else, there are situations where that persons consent may be sought before it is released to you.

@lishkaheaney7324 Жыл бұрын

@@iSTORMDiaries can you tell me what stops an employee from deleting the texts/emails after you've asked for data subject access?

@martycrow Жыл бұрын

@@lishkaheaney7324 My understanding is that it is illegal for a company/an organisation to delete data collected in the course of its normal business, even (or maybe especially!) once in receipt of a DSAR. I got this info from the ICO website which is user-friendly, in plain English and informative. It is prudent to remind the entity who holds the info when requesting DSAR and refer them to the IOC website. The requirement for a company to hold records is also a requirement under Company Law, so that may need a gentle reminder too. Good luck!