Search

How can we help?

Icon

Key FAQs on Data Subject Access Requests (DSARs)

Understanding Data Subject Access Requests (DSARs) is crucial for businesses. For many companies, opening a DSAR is a daunting task, and it can be difficult to know where to start when faced with a mountain of potential documents to disclose.

In this podcast members of the Data Protection team at Clarkslegal, have narrowed down the top FAQs we receive on DSARs, including:

  • How should I respond to a DSAR?
  • When do I need to respond to a DSAR?
  • Can I charge a fee for responding to a DSAR?
  • Can I challenge a DSAR that I have received?
  • My response to a DSAR will contain confidential information – what can I do?

If you have any questions at all about any aspect of the DSAR process, or need  advice on how to respond to one, please contact our Data Protection lawyers for advice.

Meet the speakers

Lucy White

Senior Solicitor

View profile

+44 118 960 4655

Read, listen and watch our latest insights

art
  • 06 August 2026
  • Privacy and Data Protection

The rise of the AI-powered individual: Is your business ready?

Artificial intelligence is changing the data protection landscape, but perhaps not in the way many organisations expected. Much of the discussion has centred on businesses adopting AI and ensuring they comply with the UK GDPR.

art
  • 20 July 2026
  • Privacy and Data Protection

Personal Data FAQs

Explore comprehensive answers to frequently asked questions about personal data, GDPR compliance, and your rights.

art
  • 08 July 2026
  • Privacy and Data Protection

ICO prosecutes employee under the Data Protection Act for forwarding client data to his personal email address

The issue of employees taking confidential business information or personal data when moving to a new employer remains a significant concern for businesses.

art
  • 08 June 2026
  • Privacy and Data Protection

FAQs – Privacy Documentation

Clearly documenting and regularly reviewing data protection policies and procedures is paramount to demonstrating compliance with the UK GDPR. It is essential that such policies are communicated within an entity and staff are regularly trained on these.

art
  • 19 May 2026
  • Privacy and Data Protection

New Complaints Procedure for Data Protection Coming in June – Are You Ready?

The Data (Use and Access) Act 2025 (the “Act”) received Royal Assent last year and introduces slight reforms to the UK’s data protection regime.

art
  • 06 May 2026
  • Privacy and Data Protection

Use of Personal Devices at Work: Why a Bring Your Own Device Policy is Essential

If you have employees who bring their own devices into the workplace and use said devices to deal with company data, you may want to consider a Bring Your Own Device (“BYOD”) policy.