When personal information is processed, data subjects have the right to intervene. This right can be exercised in different ways, sometimes by approaching an employee. Therefore, it is important that employees recognise and know how to respond to a data subject exercising his/her/its rights.

Course overview

The timeline for responding to a data subject request (DSR) runs from the time the DSR reaches the responsible party through an official channel, and the clock may start running even if the correct person within the responsible party has not received it. Consequently, employees must be trained to recognise a data subject access request and how to respond appropriately.

Course objectives

Participants will obtain an understanding of :

• rights of data subjects
• types of data subject requests
• legal obligations relating to data subject requests
• appropriate response.

Course outline

Participants will learn about:

• valid receipt of a DSR
• timing
• identity verification
• “information” to be provided to the requester
• personal data
• searching
• provision of access
• restrictions that may be applied to the right of access
• handling manifestly unfounded or excessive requests.