The clock starts whether or not anyone noticed DSAR
Counts the deadline on a subject access request, records what was searched and what was held back and why, and writes the reply.
The deadline
The request
What has been done
Where you looked
Record each place searched, who searched it and what came back, including the places that came back empty.
What was held back
Record the reason for anything withheld at the time you decide it.
The letters, and getting it out
How it works
DSAR manages a data subject access request under the GDPR and UK GDPR. It counts the deadline from the day the request was received, which starts whether or not anyone noticed it, records what was searched and what was withheld and why, and drafts the reply. It explains when the clock can pause and whether you can charge.
Doing this often? The OBSCURA Sovereign Suite keeps requests with the rest of the privacy programme: records of processing, risks and policies. On its own, US$4 a month; with everything else, US$9 a month or US$79 a year. 7 days free.