ICO issues subject access request guidance
The ICO has published detailed guidance aimed at employers who have to deal with subject access requests. It should be noted this is clarification of existing law not a change to the law.
It is aimed at data protection officers (DPOs) and those with specific data protection responsibilities in larger organisations when receiving a request in relation to an individual's right to access their data..
The guidance addresses the following:
● When you can refuse to respond and what amounts to a ‘manifestly excessive’ SAR?
● Can you charge a fee and if so, what is a ‘reasonable fee’ for complying with a manifestly excessive or unfounded SAR?
● Steps to take if you need to clarify a request and whether you can stop if clarification of the SAR is required.
Posted on 11/05/2020 by Ortolan