{"id":4742,"date":"2020-01-25T15:26:32","date_gmt":"2020-01-25T15:26:32","guid":{"rendered":"http:\/\/wiki.davelevy.info\/?p=4742"},"modified":"2024-11-04T09:40:30","modified_gmt":"2024-11-04T09:40:30","slug":"data-subject-access-requests","status":"publish","type":"post","link":"https:\/\/davelevy.info\/wiki\/data-subject-access-requests\/","title":{"rendered":"Data Subject Access Requests"},"content":{"rendered":"\n

I was looking for a DSAR template<\/a>, but couldn’t find anything for free, except <\/a>the ICO page<\/a>. So I made one, here are my notes, or will be …<\/p>\n\n\n\n\n\n\n\n

\n\n\n\n

Here’s some words I made, which are also in a word file DSAR-Template<\/a>;<\/p>\n\n\n\n

Your Address, Post Code v Phone Number<\/p>\n\n\n\n

<Their Address><\/p>\n\n\n\n

<Date><\/p>\n\n\n\n

Salutation<\/p>\n\n\n\n

Subject Matter Access Request : <Qualifier><\/strong><\/p>\n\n\n\n

I am xxxxxxx, although you may know me alternatively as xxxxxxx[1]<\/a>,<\/p>\n\n\n\n

My membership\/employee number is nnnnnnn and you have verified me at the following email(s).<\/p>\n\n\n\n

Email1@maildomain.name<\/p>\n\n\n\n

Please reply to my.emaildaddress@maildomain.name[2]<\/a>, my postal correspondence address is:-<\/p>\n\n\n\n

Number, Street Name
Post Town,
County Post Code<\/p>\n\n\n\n

This is a formal Data Subject Access Request. I require to see[3]<\/a> all data held related to my conduct, capability, attendance, sickness, any correspondence related to disciplinary or grievance issues, any email correspondence held by the organisation\/company about me, including that in my manager\u2019s mailboxes and my personnel records, from the current date covering the last 3 months\/two years[4]<\/a><\/p>\n\n\n\n

Correspondence should include all data held by the company\/organisation and by third parties where the company\/organisation is the data controller, to also include emails, handwritten notes, and texts or other messages on personal[5]<\/a> and work mobile phones and any other messaging platform. Please note my personal identifier is not limited to my name.  It is for any data in which relates to me, for example, identified by staff number or pronouns such as he\/she and him\/her and\/or internal system foreign keys, supporting pseudonymisation.<\/p>\n\n\n\n

I wish to receive the data electronically.<\/p>\n\n\n\n

Yours<\/p>\n\n\n\n

[1]<\/a> If known by an alias or nickname.<\/p>\n\n\n\n

[2]<\/a> You should use a private email account with a professional email id.<\/p>\n\n\n\n

[3]<\/a> If the Data Controller has CCTV records, these should be scoped in or out explicitly.<\/p>\n\n\n\n

[4]<\/a> As appropriate, the ICO suggests that a focused query will be fulfilled more rapidly<\/p>\n\n\n\n

[5]<\/a> Or explain the controls in place to ensure that personal data does not leak onto private phones.<\/p>\n\n\n\n

ooOOOoo<\/p>\n\n\n\n

Image Credit: from https:\/\/www.dporganizer.com, cropped, resized and stored for the usual reasons<\/p>\n","protected":false},"excerpt":{"rendered":"

I was looking for a DSAR template, but couldn’t find anything for free, except the ICO page. So I made one, here are my notes, or will be …<\/p>\n","protected":false},"author":1,"featured_media":4743,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":"","_share_on_mastodon":"0"},"categories":[84],"tags":[85,955,1392,1242,1591],"class_list":["post-4742","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-business","tag-business-2","tag-data-protection","tag-dsar","tag-employment-law","tag-ico"],"share_on_mastodon":{"url":"","error":""},"jetpack_featured_media_url":"https:\/\/davelevy.info\/wiki\/wp-content\/uploads\/2020\/01\/dsar-dporganiser-w650x200-cropped.png","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/davelevy.info\/wiki\/wp-json\/wp\/v2\/posts\/4742","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/davelevy.info\/wiki\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/davelevy.info\/wiki\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/davelevy.info\/wiki\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/davelevy.info\/wiki\/wp-json\/wp\/v2\/comments?post=4742"}],"version-history":[{"count":2,"href":"https:\/\/davelevy.info\/wiki\/wp-json\/wp\/v2\/posts\/4742\/revisions"}],"predecessor-version":[{"id":11650,"href":"https:\/\/davelevy.info\/wiki\/wp-json\/wp\/v2\/posts\/4742\/revisions\/11650"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/davelevy.info\/wiki\/wp-json\/wp\/v2\/media\/4743"}],"wp:attachment":[{"href":"https:\/\/davelevy.info\/wiki\/wp-json\/wp\/v2\/media?parent=4742"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/davelevy.info\/wiki\/wp-json\/wp\/v2\/categories?post=4742"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/davelevy.info\/wiki\/wp-json\/wp\/v2\/tags?post=4742"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}