An employee DSAR can return 20,000 emails. How to scope the search, cut duplicates, handle attachments and third-party data, and when you can extend or ask the requester to narrow it.

Mar 24, 2027 Read article →

🗑️

Erasure Article 17 Right to be Forgotten GDPR

Right to Erasure Requests (Article 17): A Practical Guide for Small and Mid-Sized Organisations

When you must delete personal data, when you can refuse, what to do about backups and who else to tell. A step-by-step guide to handling a GDPR erasure request within one month.

Mar 10, 2027 Read article →

📋

DSAR Article 15 Compliance GDPR

What a DSAR Response Must Contain: Article 15 Beyond the Copy of the Data

A copy of the data is only part of a complete DSAR reply. Article 15(1) also requires purposes, recipients, retention, rights, source and automated decision-making. Here is the checklist.

Feb 24, 2027 Read article →

🗄️

DSAR Records Retention GDPR

What Records to Keep After a DSAR, and for How Long

Which records to keep after answering a subject access request, why the GDPR expects them, how long to keep them, and what SAR Portal keeps for you.

Feb 10, 2027 Read article →

💼

DSAR Financial Services Brokers GDPR

DSARs for Brokers and Financial Intermediaries

A client asks their broker or adviser for their file. What is in scope, who answers for insurer and lender data, call recordings, complaints and exemptions.

Jan 27, 2027 Read article →

⚖️

DSAR Article 12(5) Compliance GDPR

"Manifestly Unfounded or Excessive" DSARs: What Article 12(5) Really Allows

When can you refuse or charge for a subject access request under Article 12(5) GDPR? The narrow tests, what does not count, and how the EU and UK differ.

Jan 13, 2027 Read article →

⚽

DSAR Sport Health Data GDPR

DSARs in Professional Sport: Players, Academy, Fans and Medical Records

How sports clubs should handle subject access requests from players, agents, academy players and parents, and fans, including medical records and CCTV.

Dec 9, 2026 Read article →

📧

DSAR Microsoft 365 eDiscovery GDPR

How to Find Personal Data in Microsoft 365 for a DSAR (Outlook, OneDrive, Teams)

Use Microsoft Purview eDiscovery to search Outlook, OneDrive, SharePoint and Teams for a DSAR: where data lives, how to build the query and how to export it.

Nov 25, 2026 Read article →

✂️

DSAR Redaction Third-Party Data GDPR

Third-Party Data in a DSAR Response: What to Redact and What to Keep

How to handle other people's personal data in a subject access response under Article 15(4) GDPR: when to redact, when to disclose, and how to record it.

Nov 11, 2026 Read article →

👔

DSAR Employment Ireland GDPR

Employee DSARs in Ireland: Handling a Subject Access Request During an HR Dispute

An employee in a grievance or dismissal dispute sends a DSAR. What Irish employers must provide, what they can withhold, and how to stay inside the deadline.

Oct 28, 2026 Read article →

🤖

DSAR AI Redaction GDPR

ChatGPT or Copilot for a DSAR? What to Check, and Where a Dedicated DSAR Tool Fits

Can you use ChatGPT or Copilot to answer a subject access request? What a DSAR needs, what to check in any AI tool, and where a dedicated DSAR tool fits.

Oct 14, 2026 Read article →

🧭

DSAR Compliance Best Practices GDPR

Are DSAR Portals Good or Bad? The Real Question Is Who Controls the Process

Not all DSAR portals are the same. Learn the difference between third-party consumer DSAR portals and secure controller-side DSAR management platforms.

Jun 27, 2026 Read article →

🇪🇺

Data Residency GDPR Security DSAR

GDPR Data Residency: Why Where Your DSAR Data Is Hosted Matters

DSAR responses are full of sensitive personal data. Where that data is hosted — and which sub-processors touch it — is a core GDPR question. Here's what to check, with references.

May 13, 2026 Read article →

🪪

DSAR Identity Verification Compliance GDPR

DSAR Identity Verification: How to Verify a Requester Without Breaching GDPR

Verifying a DSAR requester's identity protects against data breaches — but over-asking for ID is itself a compliance risk. Here's the proportionate approach, with regulator references.

Apr 15, 2026 Read article →

⏱️

DSAR Deadlines Compliance GDPR

How Long Do You Have to Respond to a DSAR? GDPR Deadlines Explained

The GDPR DSAR deadline is one month. Complex requests can be extended, and in the UK the clock can pause. Here's exactly how the timing works, with regulator references.

Mar 12, 2026 Read article →

🛡️

DSAR Compliance Buyer's Guide GDPR

DSAR Software: What to Look for in a DSAR Management Platform (2026 Buyer's Guide)

A practical buyer's guide to choosing DSAR management software. The 12 capabilities that matter, the due-diligence questions to ask, and how to compare platforms.

Feb 11, 2026 Read article →

⚖️

GDPR Fines Ireland Compliance