According to the recent article published by IT Pro, just under half of UK organisations have seen costs rise, attributed to complying with Subjects Access Requests (SARs), surprisingly, coming from their own employees.
The article is littered with a range of facts obtained from a GDPR report. This research that clearly shows the impact GDPR has had on businesses in its inaugural year. Organisations in some instances have hired people to handle increasing SARs, many more have implemented new processes and guidelines.
“The demands placed on organisations are considerable – just the initial process of identifying all the data held in respect of an individual can take weeks out of the one-month period for responding,” the report said
“Each request requires correspondence with the individual, arranging the data platform, IT searches of data held, review of potentially thousands of documents at least twice, redaction or exclusion of information that is privileged, relates to third parties or falls under another exemption set out in the GDPR, and returning to the individual along with a cover letter.
With only 30 days to satisfy the request, time is precious and tasks such as redacting information only places more pressure on the organisation. It is little wonder that the ICO has received a large number of complaints, many of which are high profile, due to unfulfilled SARs.
The Fintech Times have also picked up on the issues around SARs and have reported that just 20% of the organisations they investigated rated their ability to prove data collections and compliant GDPR processes.
Their ability to effectively redact information from documents if required was also a challenge for most, highlighting the need for better control over data and improved processes and systems to support GDPR compliance.
Which begs the question, in such an automated world, who and what can help to reduce costs, and support compliance requirements?
With the introduction of SmartRedact, DDC AS can offer an end-to-end Subject Access Request and Redaction solution, helping your organisation to save time, whilst improving accuracy and security.
Designed to support the discovery of SAR documents, assisted redaction and secure sharing; DDC AS can help you automate an extremely resource heavy and time-consuming process.View More Articles
- 14th August 2019The dangers of Subject Access Requests
- 12th August 2019Is GDPR now being taken more seriously?
- 5th August 2019The financial impact of Subject Access Requests
- 1st August 2019DDC AS Launches SmartRedact
- 31st July 2019Don’t be blindsided by your organisations handling of data
- 25th July 20191 in 3 Organisations are struggling to implement the GDPR
- 24th July 2019Lancaster Uni Phishing Attack
- 22nd July 2019The Human Element of Data Security
- 15th July 2019Third Party Data Protection
- 10th July 2019Two Fines in Two Days – ICO Plans to Fine Marriot £99m