This video is normally available to paying customers.
You may unlock this video for FREE. Enter your email address for instant access AND to receive ongoing updates and special discounts related to this topic.
Individuals have the right to request confirmation of data processing and access to their personal data, known as a Subject Access Request (SAR).
Accessibility: SARs can be made verbally, in writing, or even via social media, without the need for formal terminology.
Training: It's crucial for all staff to recognize SARs and understand the appropriate response process.
Policy Implementation: Establish procedures to record and address SARs, including verbal or in-person requests.
Personal Data: SARs only entitle individuals to their own personal data, not information concerning others, unless authorized.
Special considerations apply to SARs regarding data of minors.
Child's Entitlement: SARs concerning a child's data should be addressed directly to the child if deemed mature enough to understand.
Assessment: In Scotland, individuals aged 12 or above are presumed mature enough to exercise their rights. Similar considerations may apply elsewhere.