Learn the law on Subject Access Requests under the GPPR and the process of handling a SAR.
In July 2025, Kristy Gouldsmith delivered a webinar with Chronicle Law on handling subject access requests (SARs). A SAR allows individuals to request access to their personal data held by organisations, making timely and accurate responses essential. Typically, organisations must respond within one month, though complex cases allow up to three. Each request requires careful assessment, as disclosing too much or too little data carries risks. Exemptions, redactions, and issues like third-party data or legal privilege add complexity. Gouldsmith emphasised that SARs should not be underestimated and offered support services, including redaction, exemption assessments, and preparing Article 15 letters.
You can view the full complimentary webinar below:
