Question
(3) https://course.cple-learning.couk If you receive a Subject Access Request, what should you do? Follow your organisation's policy and ensure it is recorded and dealt with correctly Make a note in the workplace diary and leave it for your manager to find on Monday Tell the person submitting the SAR that you cannot handle these requests and they need to speak directly to the manager Start searching for the information to respond as quickly as possible
Answer
4.6
(264 Votes)
Graham
Veteran · Tutor for 11 years
Answer
Follow your organization's policy and ensure it is recorded and dealt with correctly
Explanation
Subject Access Request (SAR) refers to the right of individuals to access their personal data held by a company or organization. According to the UK's GDPR regulation, when an organization receives an SAR, it must acknowledge the request, confirm the requester's identity, and reply with the required information usually within a month time frame. In essence, when you get an SAR as an employee of an organization, you must follow the policies and procedures stipulated by your organization relating to the manner of recording and handling such requests. The handling of SARs isn't a task left for the discretion of the individual staff member; hence, it isn't suitable for the individual to leave it to a manager nor tell the requester to speak directly to the manager as it may go against established procedure. Therefore, the right option should be the compliance with company policies and procedures on SARs.