Best Practice Update

    You are here:  
  1. Home
  2. Best Practice Update
  3. Product Focus on Checklists : Subject Access Requests
Checklists in navy text by Data Protection Education. Data Protection Services badge. The DPE Knowledge Bank on a laptop screen
Best Practice Updates

Product Focus on Checklists : Subject Access Requests

All of our customers have access to the DPE Knowledge Bank which has a Best Practice Checklist area.  Each checklist is designed to help you walk through all aspects of data protection.
The checklist will give you an insight about where your organisation is with data protection from a data privacy and technical security perspective. The checklists form part of the Best Practice library which includes contextualised guidance, documents and resources on specific areas of data processing.  The checklists form part of the ICO Accountability Framework which helps organisations with their governance and corporate risk management where it relates to data protection.    The checklists cover all aspects of the framework, enabling you to assess against organisation baselines:

  1. Leadership & Oversight
  2. Risk Management (DPIA's)
  3. Policies & Procedures
  4. Individual Rights
  5. Contracts & Data Sharing
  6. Transparency
  7. Training & Awareness
  8. Records Management
  9. Monitoring Verification & Reporting (Data Breaches, SARs and FOI's)
  10. Response & Enforcement (SARs and FOI's)

Subject Access Requests

The Subject Access Requests Checklist asks questions about policies and procedures relating to subject access requests.  It links to the Subject Access Requests Best Practice Area which includes template procedures, e-learning and drip feed posters and FAQ's.  When dealing with a Subject Access Request it is usual to redact some of the data, so we would recommend looking at the Redaction Checklist and the Redaction Best Practice Area.

Answer a sample SAR checklist question:

Are all staff trained on how to recognise a SAR?

Invalid Input

Amazing, you have ticked off an important item on the Subject Access Request checklist:
For further help and guidance and access to the full checklist, please contact This email address is being protected from spambots. You need JavaScript enabled to view it..



Everyone in an organisation should understand how to recognise a subject access request; it doesn't necessarily have to be requested in written form and could even be asked over social media.

Clipart cartoon with headphones on Please contact us for more help and advice about data protection compliance and cyber security standards: This email address is being protected from spambots. You need JavaScript enabled to view it. including the full checklist and best practice.

 

Try asking the data protection  lead, or SLT digital lead in your organisation or contact your DPO.  Is recognising a SAR part of your organisation's regular data protection training?

We can provide help and guidance with data protection compliance, cyber security standards and records management: This email address is being protected from spambots. You need JavaScript enabled to view it. including the full checklist and best practice.




DPE customers can get started on completing the Subject Access Request checklist here:
©2024 Data Protection Education Ltd.

Search

  • News