12/7/20
Subject Access Request • Under Data Protection, a person has always had the right to request access to all of the information held about them • This is called a Subject Access Request (SAR) • Subject Access Requests must be completed within one month free of charge • Holding an accurate inventory of information will be a key enabler for completing SAR efficiently • Data has to be provided in a standard format • The person must also be informed of further information, including the relevant Retention Periods for the data held and their right to have inaccuracies corrected
© 2020 AmericanChecked Inc.
53
Legal Basis • Processing of Personal Information can only occur when there is a legal basis for carrying it out. • Legal Basis can be established where one of the following applies: – The person has given explicit consent – Necessary for performance of a contract – Compliance with a Legal Obligation – To protect the vital interests of the person – A task carried out in the public interest – For the legitimate interests of the data controller
© 2020 AmericanChecked Inc.
54
27
Made with FlippingBook - Online catalogs