Handling SARs now and after May (a UK perspective)
"Under section 7 of the current UK Data Protection Act 1998 (the ‘DPA’), upon the submission of a valid subject access request (‘SAR’) to a data controller, an individual has the right to obtain a description of the personal data being held on them, the purposes for which the data are held, and the recipients of the data. For the request to be valid, it must be in writing, and include the relevant fee (if charged by the controller)."
This content is provided for general informational purposes only, and your access or use of the content does not create an attorney-client relationship between you or your organization and Cooley LLP, Cooley (UK) LLP, or any other affiliated practice or entity (collectively referred to as “Cooley”). By accessing this content, you agree that the information provided does not constitute legal or other professional advice. This content is not a substitute for obtaining legal advice from a qualified attorney licensed in your jurisdiction and you should not act or refrain from acting based on this content. This content may be changed without notice. It is not guaranteed to be complete, correct or up to date, and it may not reflect the most current legal developments. Prior results do not guarantee a similar outcome. Do not send any confidential information to Cooley, as we do not have any duty to keep any information you provide to us confidential. This content may be considered Attorney Advertising and is subject to our legal notices.