Subject access requests: what’s new and what’s next?
As 2025 unfurls, our information governance and data protection team reflect on a busy 2024, during which they have assisted clients navigate the key challenges when responding to data subject access requests (SARs). The degree of support has varied, with data controllers receiving their first SAR needing end-to-end support, others simply sense checking their response, and seasoned SAR responders needing advice on tricky legislative exemptions or access to our AI software for speed and precision. Although Article 15 UK General Data Protection Regulation is the headline legal provision to consider, there is no ‘one size fits all’ approach. Also the application of the permitted exemptions contained within Schedule 2-4 of the Data Protection Act 2018 will differ from one organisation to another, and one SAR to another.
SARs can quickly become challenging on a practical, legal, technical, and financial level. Our experienced team are well equipped to help your organisation navigate through a SAR response or help you establish a response process. Rest assured, you won’t be the first, or the last, to ask for help.
Partner Helen Tringham shares her thoughts on recent and upcoming developments to be aware of in her latest blog post "A year of subject access requests – key challenges and changes".
If you require support or information about our SAR response assistance do contact Helen.
Our content explained
Every piece of content we create is correct on the date it’s published but please don’t rely on it as legal advice. If you’d like to speak to us about your own legal requirements, please contact one of our expert lawyers.