Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Course Outline
Introduction to Subject Access Requests (SARs)
- Understanding what a Subject Access Request entails
- The legal basis and significance of SARs
- Overview of key regulations (GDPR, CCPA, etc.)
Legal Framework and Compliance Requirements
- Data subjects' rights under GDPR and other relevant laws
- Required timeframes and deadlines for responses
- Penalties associated with non-compliance
Processing a Subject Access Request
- Validating and verifying the requester's identity
- Locating and compiling the requested data
- Ensuring secure data transmission
Handling Third-Party and Sensitive Data
- Identifying third-party information within SARs
- Applying redaction and anonymization techniques
- Balancing data access rights with privacy laws
Exemptions and Limitations
- Circumstances under which an organization may refuse a SAR
- Exemptions related to security, confidentiality, and legal privilege
- Managing excessive or unreasonable SARs
Best Practices for SAR Management
- Developing an internal SAR policy
- Creating a streamlined SAR response process
- Leveraging technology to automate SAR handling
Case Studies and Practical Exercises
- Reviewing real-world SAR cases
- Simulating a SAR request and response
- Group discussion on SAR challenges and solutions
Summary and Next Steps
Requirements
- Fundamental knowledge of data protection and privacy laws
- Understanding of organizational data management policies
- Experience in managing customer or employee data (recommended)
Audience
- Data Protection Officers (DPOs)
- Compliance officers
- Legal and HR professionals
- IT and data management teams
7 Hours
Testimonials (2)
Really enjoyed the topics covered and the way that the trainer ran the session
Richard
Course - BCS Practitioner Certificate in Data Protection
The variety of the information shared and the clarity to explain terms in plain English.