SUBJECT ACCESS REQUESTS REDACTION AND PROCESSING

• Dedicated account manager and subject access requests lead to manage and execute the service.
• The process will be managed using software that ensures timeframes are followed. The portal evidences communications between DPAS and the data subject and provides a full audit trail.
• Access to Subject Access Request templates, enabling you to handle responses to the data subject requests in the future, to use in your organisation.
• Redaction services for electronic and paper documents.
• Redaction policy, agreed with you, if you don’t have one internally.
• A simple, yet effective on-boarding policy that allows us to clarify and fully understand your requirements.
• External DPO assistance and advice, if required. 

• Ensures you adhere to legal timeframes where possible.
• As we are an independent organisation, we have experience with a variety of SARs and different processes where we can utilise best practices.
• Using DPAS ensures that there is a fresh pair of eyes at your organisation’s processes and an independent assessment.
• Outsourcing your SAR processing means minimal disruption to your team.
• We have designated experts who will be in communication throughout, to ensure a smooth and accurate process.

1. Why would we want to outsource Subject Access Requests?

Organisations have a statutory duty to respond to all Subject Access Requests (SARs) within specific timescales. Even a relatively straightforward request can require the review, processing and redaction of thousands of documents. It can be difficult to predict the volume of SARs an organisation will have to process at any given time. This makes it difficult to allocate the appropriate level of resource for this service. Our SAR Processing Service can help your organisation handle these peaks and troughs in demand. Simply purchase a package of days from us, and when required, we will process the requests on your behalf, ensuring that they are delivered within legal timeframes. 

2. How much does it cost?  

Prices start from £300 per day.

3. How does it work?

DPAS will nominate a SAR lead who will be the first point of contact to manage the process. The process will then be overseen by our Chief Data Protection Officer, Nigel Gooding, ensuring that if the organisation can use exemptions whilst dealing with the DSAR, these will be properly applied. On commencement of this contract, DPAS will nominate a named Account Manager to liaise with the customer, and ensure the successful delivery of this service.

The process will be managed using software that ensures timeframes are followed. The portal evidences communications between DPAS and the data subject and provides a full audit trail. It also manages the secure exchange of information between the organisation and our SAR team. 

For your convenience we also offer redaction services for electronic and paper documents.  

With electronic files, we ensure that they are always transferred securely through an encryption service. Following this we redact the files using Adobe Acrobat, removing metadata and redacted information permanently, before returning the redacted files.  

In paper files, we are able to redact a copy of the original documents either in paper form or electronic if scanned and sent to us. We ensure that our redaction is consistent and have measures in place to make sure that the redaction services are specific to your requirements and needs.

4. How many pages can you redact a day?

We maintain a redaction speed of between 250 – 500 pages per day. This is depending on the content of the files, and the volume of redaction needed per document.  

5. ​​Are your team qualified? 

Our team undertake our Internal SAR training, which is a CPD accredited course. They are also qualified Data Protection Practitioners.