According to the recent article published by IT Pro, just under half of UK organisations have seen costs rise, attributed to complying with Subjects Access Requests (SARs), surprisingly, coming from their own employees.
The article is littered with a range of facts obtained from a GDPR report. This research that clearly shows the impact GDPR has had on businesses in its inaugural year. Organisations in some instances have hired people to handle increasing SARs, many more have implemented new processes and guidelines.
“The demands placed on organisations are considerable – just the initial process of identifying all the data held in respect of an individual can take weeks out of the one-month period for responding,” the report said
“Each request requires correspondence with the individual, arranging the data platform, IT searches of data held, review of potentially thousands of documents at least twice, redaction or exclusion of information that is privileged, relates to third parties or falls under another exemption set out in the GDPR, and returning to the individual along with a cover letter.
With only 30 days to satisfy the request, time is precious and tasks such as redacting information only places more pressure on the organisation. It is little wonder that the ICO has received a large number of complaints, many of which are high profile, due to unfulfilled SARs.
The Fintech Times have also picked up on the issues around SARs and have reported that just 20% of the organisations they investigated rated their ability to prove data collections and compliant GDPR processes.
Their ability to effectively redact information from documents if required was also a challenge for most, highlighting the need for better control over data and improved processes and systems to support GDPR compliance.
Which begs the question, in such an automated world, who and what can help to reduce costs, and support compliance requirements?
With the introduction of SmartRedact, DDC AS can offer an end-to-end Subject Access Request and Redaction solution, helping your organisation to save time, whilst improving accuracy and security.
Designed to support the discovery of SAR documents, assisted redaction and secure sharing; DDC AS can help you automate an extremely resource heavy and time-consuming process.View More Articles
- 22nd November 2019Why Aren’t HR Managers Prioritising Employee Data Security?
- 14th November 2019Thousands Of Drivers’ Social Security Numbers Exposed In Data Breach
- 11th November 2019Multinational Cyber Security And Defence Company Suffers Insider Data Breach
- 14th October 2019Data: Defining or Divisive
- 12th September 20192019 on track to be the “worst year on record” for data breach activity
- 10th September 2019Leaving the EU: Brexit and GDPR
- 9th September 2019Data Breaches: Did you know?
- 5th September 2019What should you do if your data has been breached?
- 3rd September 2019GDPR was just the beginning
- 14th August 2019The dangers of Subject Access Requests