GDPR: subject access request policy

Ensure the consistent and lawful handling of SARs

When an employee wishes to make an SAR request under GDPR, requests must be handled in a lawful and fair way. With a policy in place, not only can you inform your employees of how to make a request but also educate managers on what to do when an SAR is made.

A policy to comply with GDPR laws

This policy helps to outline all the essential details of making a subject access request. From how to make a request, timescales and reasons why a request may be denied. By having a formal policy on file you can guarantee both clairty and fairness in your handling of SARs. Whilst also supporting your legal obligations and compliance as an employer.