Subject Access Request (SAR) Empathy
There are many definitions of empathy but the Wikipedia definition is, ‘the capacity to understand or feel what another person is feeling from within their terms of reference’. This is a little deep for a Monday but I think this is a very important consideration when you reply to any sort of GDPR SAR or complaint.
When you draft your reply, try to think about why the person sent the SAR and respond accordingly, using appropriate style and language. We see a lot of SARs are most are from people who are unhappy about something and not just looking for information about how their data is being processed. They may be disgruntled ex-employees, customers with service issues, candidates that didn’t get the job, or people that just don’t remember contacting you – your reply should address their issue but also consider their feelings and their personal situation.
You must always comply with Article 15 requirements and make sure you meet your GDPR obligations but considering who the data subject is and why they sent the report might just help you respond in the most appropriate way, defuse the situation and avoid any escalation. Take your time when you draft the response – don’t rush – a few extra minutes drafting a good first reply might just save you a huge amount of time later.
Have a great week all.
Hope you find this useful. If you need an EU Rep, have any GDPR questions, or have received a SAR or Regulator request and need help then please contact us anytime. We are always happy to help...
GDPR Local team.
For many online businesses, data protection has become a critical concern. With the introduction of
Unraveling India’s Digital Personal Data Protection Bill 2023: A Comparative Study with GDPR – Part 2
In the first part of our blog series - India Enacted the Digital Personal Data Protection Bill in 2
Personal information is increasingly stored and shared online, making it essential to have secure m