DiSARm a Data Subject Access Request (DSAR) in 4 Steps
The scope of a DSAR can be wide-ranging and is often used by either a disgruntled current or former employee, embarking on a contentious litigation process with their current or ex-employer.
If an employer collects, holds and uses personal data belonging to an existing or past employee and the employer falls under the scope of the GDPR, then a response furnishing all personal data in scope must be issued from to the employee within 30 days.
The traditional method which is usually deployed by a number of organizations entails exporting data to a web-based review platform and commencing a manual review of all documents. Reviewers would then identify personally identifiable information (PII) within a document while also manually redacting third party PII and/or commercially sensitive information that may lie within the same document.
While this traditional methodology may still be suitable in some cases, with the evolution of Artificial Intelligence (AI), the aforementioned process has become mostly obsolete for larger, and more complex DSAR responses.
Comments
Post a Comment