Expert Advice Community

Guest

Subject access request

  Quote
Guest
Guest user Created:   May 23, 2018 Last commented:   May 23, 2018

Subject access request

Upon receipt of Subject access request, the procedure says to ask for 2 forms of ID. How soon do we have to ask this? If we leave it for 29 days, then they pass the ID verification, does 30 day period begin again? Also it says data subject to submit DSAR in prescribed form – which is this?
0 0

Assign topic to the user

EU GDPR DOCUMENTATION TOOLKIT

Step-by-step implementation for smaller companies.

EU GDPR DOCUMENTATION TOOLKIT

Step-by-step implementation for smaller companies.

Expert
Andrei Hanganu May 23, 2018

Answer:

Checking the identity of the data subject is one of the first steps when dealing with a DSAR so waiting till the last day to confirm the identity of the requester to get the 30 days period “reset” would most likely be considered abusive. So my advice is to check the identity of the requester as soon as possible in he process. Please consult the “Data Subject Access Request Flowchart” which is part of the “ DATA SUBJECT ACCESS REQUEST PROCEDURE” to see how a DSAR flow could look like.

As regards to the form is not a compulsory requirement to use a specific template although is advisable to do so as the requests would be handled much easier and in a consistent way.

To learn more about DSARs check out our webinar “Data Subject Rights under the EU GDPR” (https://advisera.com/eugdpracademy/webinar/data-subject-rights-under-the-eu-gdpr-free-webinar-on-demand/).
Quote
0 0

Comment as guest or Sign in

HTML tags are not allowed

May 23, 2018

May 23, 2018

Suggested Topics

Guest user Created:   Aug 22, 2018 EU GDPR
Replies: 1
0 0

Data Subject access request procedure

Guest user Created:   May 25, 2018 EU GDPR
Replies: 1
0 0

Data subject access requests