The financial impact of Subject Access Requests

5th August 2019

According to the recent article published by IT Pro, just under half of UK organisations have seen costs rise, attributed to complying with Subjects Access Requests (SARs), surprisingly, coming from their own employees.

The article is littered with a range of facts obtained from a GDPR report. This  research that clearly shows the impact GDPR has had on businesses in its inaugural year. Organisations in some instances have hired people to handle increasing SARs, many more have implemented new processes and guidelines.

“The demands placed on organisations are considerable – just the initial process of identifying all the data held in respect of an individual can take weeks out of the one-month period for responding,” the report said

“Each request requires correspondence with the individual, arranging the data platform, IT searches of data held, review of potentially thousands of documents at least twice, redaction or exclusion of information that is privileged, relates to third parties or falls under another exemption set out in the GDPR, and returning to the individual along with a cover letter.

With only 30 days to satisfy the request, time is precious and tasks such as redacting information only places more pressure on the organisation. It is little wonder that the ICO has received a large number of complaints, many of which are high profile, due to unfulfilled SARs.

The Fintech Times have also picked up on the issues around SARs and have reported that just 20% of the organisations they investigated rated their ability to prove data collections and compliant GDPR processes.

Their ability to effectively redact information from documents if required was also a challenge for most, highlighting the need for better control over data and improved processes and systems to support GDPR compliance.

Which begs the question, in such an automated world, who and what can help to reduce costs, and support compliance requirements?

With the introduction of SmartRedact, DDC AS can offer an end-to-end Subject Access Request and Redaction solution, helping your organisation to save time, whilst improving accuracy and security.

Designed to support the discovery of SAR documents, assisted redaction and secure sharing; DDC AS can help you automate an extremely resource heavy and time-consuming process.

View More Articles