People are becoming increasingly aware of the power of their personal data. Management of personal data is now a public conversation and people are exercising their rights. As an organisation, it has never been more important to be able to respond to DSARs (Data Subject Access Requests) in a confident, compliant and defensible manner.
At JSIG, we understand the substantial administrative burden that can be placed on an organisation when responding to a DSAR. Set against the requirement to service the request within one month, attention and resource is inevitably drawn away from other productive and billable activities. As a result, we have developed flexible service options which are scalable to accommodate your compliance challenges.
JSIG delivers support to providers of outsourced DSAR services.
When taken in conjunction with our DPO as a Service option, JSIG offers end-to-end management of the DSAR support process.
JSIG has successfully helped many clients to meet their DSAR obligations. We have a deep understanding of Data Protection regulation and your obligations under the GDPR; you can lean on us to stay on track with your compliance journey. Respond to requests in a confident and compliant manner, within the timeframe prescribed.
Each service option is made bespoke to your organisation and we never use a one-size-fits-all approach.
At JSIG we have crafted what we believe is the perfect combination in our DSAR as a Service offering.
Our differentiator: Expert Data Protection Officers powered by Savannah, our advanced discovery and redaction system. Experts with deep technical knowledge leveraging software designed by DPOs, for DPOs and crafted by our leading software developers.
You are not outsourcing to a team carrying out yet more manual discovery, or using tech without the subject matter knowledge, you are outsourcing to a powerful combination of expertise and advanced technology.
A data subjects right of access is enshrined in Article 15 of the GDPR which states that the ‘data subject shall have the right to obtain from the controller confirmation as to whether or not personal data concerning them is being processed, and, where that is the case, access to the personal data and the following information’:
We work to understand the parameters of the DSAR - who the data subject is and where to target our search. This will help us to understand exactly what information needs to accessed.
We run a Savannah discovery to identify which files contain Personal Data (Personally Identifiable Information - PII) and Sensitive Personal Data - where your exposure lies as an organisation.
The Savannah discovery allows us to zero in on our analysis and will provide a list of files that contain the data subject (and/or their aliases). We find that this process frequently unearths additional aliases which would be considered as Personal Data under the GDPR, but are so easily missed in manual searches.
Our expert Data Protection Officers always review the results, and working together with the client, determine the appropriate course of action. The human element: no auto-generated out-of-context results.
Following the analysis and DPO review, Savannah is leveraged to make any necessary redactions, permanently obfuscating data not suitable for disclosure.
Finally, you receive your report ready for dissemination and onward disclosure.
If your organisation has received a DSAR and you don’t have the in-house expertise or resource to service the request, it is essential that you ensure you are set to respond in a compliant manner. Our combination of expert DPOs leveraging our advanced discovery and redaction system, Savannah, will make sure you receive a comprehensive and cost-effective solution to DSAR support and management.
Get in touch to arrange a consultation. Let one of our expert consultants demonstrate how we can help you to meet your DSAR obligations at a fraction of the cost.
A comprehensive solution to your DPO obligations and responsibilities under the GDPR
The additional expertise, resource and support you need to keep your compliance journey on track.
All of the templated and customisable policies, processes, procedures and checklists you need to meet the requirements of the GDPR
Tailored, relevant, and up-to-date training delivered by our experts.
Our powerful discovery and redaction platform.
Our enhanced document scanning service. Discover PII hidden within your paper archives and redact the digital copies where necessary.
Fill in the form below and we’ll get back to you as soon as possible
JSIG is committed to protecting and respecting your privacy. We will also occasionally contact you about products, services and content that we feel are both relevant and of interest to you. You can unsubscribe from these communications at any time. For more information please see our privacy policy.
Keep up to date with news and insights from our world. You can always unsubscribe at any time. For more information please see our privacy policy.
JS Information Governance Limited
Simons House 46 Second Drove, Fengate, Peterborough, Cambridgeshire, PE1 5XA, United Kingdom.
Registered in England & Wales – Registration No. 10859482
