Past Webinar

Subject Access Requests for UK Law Firms

In her July 2025 webinar with Chronicle Law, Kristy Gouldsmith highlighted the importance of responding promptly and carefully to subject access requests (SARs). She explained the legal obligations, common pitfalls, and complexities such as exemptions, redactions, and third-party data. Gouldsmith also outlined how her team supports organisations with compliance and Article 15 requirements.

Subject Access Requests for UK Law Firms

Subject Access Requests for UK Law Firms

Learn the law on Subject Access Requests under the GPPR and the process of handling a SAR.

In July 2025, Kristy Gouldsmith delivered a webinar with Chronicle Law on handling subject access requests (SARs). A SAR allows individuals to request access to their personal data held by organisations, making timely and accurate responses essential. Typically, organisations must respond within one month, though complex cases allow up to three. Each request requires careful assessment, as disclosing too much or too little data carries risks. Exemptions, redactions, and issues like third-party data or legal privilege add complexity. Gouldsmith emphasised that SARs should not be underestimated and offered support services, including redaction, exemption assessments, and preparing Article 15 letters.

You can view the full complimentary webinar below:


About the Contributor
I'm Kristy Gouldsmith, a data protection expert. I’m a solicitor who helps organisations to sort their data protection so that they can keep the trust of their customers and staff, avoid the cost and time of dealing with data breaches and create good data protection practices to enhance their business. I take care of your...

Be the first to know

Subscribe for our latest legal news in your inbox. All for FREE.