Handling SARs safely

Managing subject access requests (SARs) can be one of the most time-consuming and complex aspects of data protection.  Overseeing the management of these and ensuring they do not lead to further, more complex or undesirable outcomes for the school can be an even bigger challenge, especially when SARs sit alongside safeguarding, HR, complaints and exclusions.

This 30 minute session shares legal insight and practical tips to help you effectively respond to SARs.  It focuses on the realities schools face, and explains the legal and governance implications when SARs are mishandled.

In this session we explore

• What the law actually requires regarding time limits and extensions

• When to seek evidence of ID, authorisation and clarification

• How to do a reasonable and proportionate search

• What supplementary information you must provide alongside a copy of the personal data

• Key considerations when dealing with safeguarding information and the personal data of other people

• When you can refuse to respond to a SAR

• Information security considerations

Take home points

A legally robust SAR workflow you can apply across a school or trust

Clear guidance on documenting decisions so they stand up to scrutiny

Practical and risk based tips

This session is for

Those handling SARs directly and senior leaders who oversee the process and carry accountability.

Claire Hall