Avoid ICO Traps: Fresh SARs Advice for Employers
The Information Commissioner's Office (ICO) has released guidance to help businesses and employers properly respond to Subject Access Requests (SARs). SARs allow individuals to request personal information from organizations and the guidance simplifies the process of understanding and responding to them. It includes information about timeframes, what information must be sent, and how to handle requests for large amounts of data. It also advises to provide more context than just the data requested and to inform the requester of any third parties it shares the data with. Understanding and adhering to these rules will help organizations protect themselves from potential non-compliance, while also enabling effective data sharing.