DiSARm a Data Subject Access Request (DSAR) in 4 Steps

 Since the introduction of the GDPR on May 25th , 2018, LDM Global has seen a considerable spike in the number of Data Subject Access Requests (DSARs) faced by our clients on a monthly basis.

The scope of a DSAR can be wide-ranging and is often used by either a disgruntled current or former employee, embarking on a contentious litigation process with their current or ex-employer.

If an employer collects, holds and uses personal data belonging to an existing or past employee and the employer falls under the scope of the GDPR, then a response furnishing all personal data in scope must be issued from to the employee within 30 days.

The traditional method which is usually deployed by a number of organizations entails exporting data to a web-based review platform and commencing a manual review of all documents. Reviewers would then identify personally identifiable information (PII) within a document while also manually redacting third party PII and/or commercially sensitive information that may lie within the same document.

While this traditional methodology may still be suitable in some cases, with the evolution of Artificial Intelligence (AI), the aforementioned process has become mostly obsolete for larger, and more complex DSAR responses.

Comments

Popular posts from this blog

5 STEPS TO BUILDING AN EFFECTIVE DOCUMENT REVIEW PROCESS

LDM Global Launches Data Subject Access Request Solution

Demystifying Legal Jargon: A Plain Language Guide for Clients