Handling Subject Access Requests

Freevacy is a dedicated Information Rights training provider, offering continuous professional development for DPOs, compliance teams, executives and frontline employees.  We offer a complimentary range of certificated training courses from two globally recognised independent examination bodies, the IAPP and BCS.  We also deliver custom learning and development programmes to establish a privacy-compliant culture throughout the workforce.  Our informal, interactive and in-depth training strikes the perfect balance between practical, real-world situations and the law.Training during the COVID-19 pandemicWe deliver all BCS and IAPP certified training courses through live online classes.  Whether attending from home, or the office, training is delivered safely across a secure WebEx platform with all the support and interactivity found in the classroom.

Freevacy Ltd

A detailed one-day practical workshop designed for compliance teams
and other professionals responsible for managing the lifecycle of
SARs.

<p>One of the principal aims of the UK General Data Protection Regulation (GDPR) is to empower individuals (data subjects) by giving them control over their personal data. These fundamental rights are set out in Articles 12-22 in Chapter 3 of the GDPR.</p><p>They include the right of access (subject access) to ask an organisation whether they hold any personal information about them and to ask for a copy. Regardless of what area of business an organisation operates in, if it holds or processes personal data, upholding the right of access is a legal requirement.</p><p>This practical one-day training course is intended for individuals tasked with responding to subject access requests (SARs).</p><p>The course covers:</p><h3><strong><strong>Introduction to Data Subject Rights (DSRs):</strong></strong></h3><ul><li>The rights of the data subject under the UK GDPR</li><li>The 8 fundamental data subject rights, including the right of access</li><li>Overview of the processes and procedures (Transparency &amp; Modalities) required to ensure compliance with DSRs</li></ul><p><br></p><h3><strong><strong>Subject Access Requests (SARs)</strong></strong></h3><p>What the data subject can ask for and expect to be told:</p><ul><li>What data is being processed</li><li>Requesting access to the data</li><li>The purpose of processing</li><li>The types of personal data</li><li>How long it will be held</li><li>Who the data is shared with</li><li>Informing data subjects of their right to make a complaint to the ICO</li><li>Informing data subjects of their other DSRs</li><li>The source of the data</li><li>The logic behind automated processing</li><li>Safeguards for international transfers</li></ul><p>Other important aspects relating to SARs:</p><ul><li>How requests can be made</li><li>How requests relating to children’s data should be handled</li><li>How to identify the data subject requesting the information</li><li>Identifying third-party requests of personal data on behalf of the data subject</li><li>Clarification of requested information</li><li>Handling requests that identify third-party information</li><li>Searches for the requested information</li><li>Timescales for responding to a request</li></ul><p><br></p><h3><strong><strong>Subject Access Considerations:</strong></strong></h3><ul><li>What is personal data?</li><li>Searches for personal data</li><li>Third-party data</li><li>Enforced Subject Access</li><li>GDPR and DPA18 do not cover deceased persons' data</li><li>Understanding the difference between SARs and normal business</li><li>Unstructured manual records</li><li>SAR provisions and exemptions for special cases of access</li></ul><p><br></p><h3><strong><strong>Refusing a SAR:</strong></strong></h3><ul><li>Manifestly unfounded requests</li><li>Manifestly excessive requests</li></ul><p><br></p><h3><strong><strong>Restrictions affecting data subject's rights (Exemptions):</strong></strong></h3><ul><li>What adaptions and restrictions different exemptions apply</li><li>Exemptions</li></ul><p><br></p><h3><strong><strong>Complaints and Appeals:</strong></strong></h3><ul><li>Complaints and appeals</li><li>Enforcement</li></ul>

Our {communityGuidelinesLink} describe the sort of content we prohibit on Eventbrite. If you suspect an event may be in violation, you can report it to us so we can investigate.

To report other categories of prohibited or illegal content, submit {link}

Handling Subject Access Requests

More upcoming events from Freevacy Ltd

Discover more upcoming events from Freevacy Ltd, from Science & Tech to other experiences you might love.

Handling Subject Access Requests

More upcoming events from Freevacy Ltd

Discover more upcoming events from Freevacy Ltd, from Science & Tech to other experiences you might love.

More Science & Tech events

Browse more Science & Tech events with different dates, prices, and formats to find your next great experience.