Data Subject Access Request · DSAR · UK GDPR · EU GDPR
Data Subject Access Requests Handled On Time
When a UK or EU customer asks what data you hold about them, the clock starts immediately. We help UAE companies answer every data subject access request (DSAR), and requests for erasure, correction or objection, correctly and within the legal deadline.
The Legal Requirement
What a Data Subject Access Request Requires
Under Article 15 of the UK GDPR and the EU GDPR, individuals have the right to a copy of their personal data. They are also entitled to know why it is processed, who receives it, how long it is kept and where it came from. You must normally respond within one month of receiving the request. However, you can extend this by up to two further months if requests are complex or numerous, provided you tell the person within the first month.
A request does not need any special wording or form. It can arrive by email, through customer service, on social media, or through your UK or EU representative. As a result, many companies miss requests simply because staff do not recognise them. The ICO’s guidance on the right of access explains the rules in detail.
Access is only one of several rights. Individuals can also ask you to correct or erase their data, restrict or object to processing, or receive their data in a portable format. Each right has its own conditions and exceptions.
- 01
One Month
The standard deadline to respond, extendable by two months in limited cases.
- 02
Usually Free
A fee can only be charged where a request is manifestly unfounded or excessive.
- 03
Identity Checks
You may verify identity, but only with reasonable, proportionate checks.
- 04
Third-Party Data
Information about other people must be protected or redacted before disclosure.
Our Service
How We Support Your Data Subject Access Request Response
Practical, deadline-driven support for UAE companies with UK and EU customers.
Request Triage
We confirm whether the message is a valid request, which rights it covers and the exact deadline.
Search Strategy
We tell you which systems to search (email, CRM, support tickets, logs) and how to search them proportionately.
Exemptions & Redaction
We identify legal exemptions and redact third-party and privileged information.
Response Letters
We draft the response letter and supporting information in clear English.
Erasure & Objection Requests
We advise on when you must comply and when you may lawfully refuse.
DSAR Procedure
A written internal procedure and staff guidance, so your team can recognise and log requests.
Why It Matters
Common DSAR Mistakes
Missed Deadlines
Late responses are one of the most frequent causes of complaints to regulators.
Incomplete Searches
Forgetting systems such as chat tools, call recordings or backups.
Over-Disclosure
Sending other people’s personal data or confidential business information.
Using DSARs in Disputes
Requests are often made by former employees or unhappy customers, and therefore need careful handling.
A good response depends on knowing where your data is. That is why we link DSAR handling to your records of processing activities and your privacy policy.
How It Works
Four Steps to a Compliant Response
Log & Triage
Confirm the request, the rights involved and the deadline.
Search
Collect personal data from the relevant systems.
Review & Redact
Apply exemptions and protect third-party data.
Respond
Send a complete, well-documented response on time.
Common Questions
Data Subject Access Request — FAQ
Get Started
Never Miss a DSAR Deadline
Received a request, or want a procedure in place before one arrives? Contact us today.
Get DSAR SupportOr contact us directly: +44 7368 955207 · a.moini@padinternationalgroup.com