Data Subject Access Requests (DSARs) and Individual Rights

The UK GDPR provides individuals with a range of information rights including the right to request their own personal data and to have data corrected or deleted. None of these rights are absolute. Each requires careful consideration of how the law applies and raises specific challenges for organisations on balancing the individual’s right with competing rights and obligations.

Our specialist data protection team has extensive experience assisting both individuals making DSARs and deletion/correction requests as well as organisations respond to DSARs and individual requests.  We can support you responding to/making complaints, conducting reviews and engaging with ICO enquiries.

Data subject access requests (DSARS):

For organisations: when you receive a DSAR, we can advise you on the process of searching your systems, considering exemptions, and preparing the response. We provide bespoke packages of support designed to meet your needs. With our specific expertise across investigations and litigation, our DSAR team can assist you in navigating the difficult issues arising when DSARS are made within complex or contentious circumstances such as employment proceedings or civil litigation.

For individuals: a carefully crafted DSAR can be a powerful tool to help you understand the personal data a data controller may be proceedings about you.  We can advise you in relation to how best to make a DSAR and how to deal with any non-compliance.

Rectification and deletion: Such requests are rarely straightforward, especially given competing professional, regulatory or legal record keeping obligations. We can advise on the relevant legal obligations and best practice response.

Monitoring and automated decision making: Individuals have specific UK GDPR rights with respect to steps taken by an organisation to monitor their actions or behaviour or make decisions about them. We can assist individuals in enforcing those rights and we can advise organisations in relation to their obligations including in the adoption of new technology.