Zansa › Answers › Privacy, security and ownership
What are data subject access requests and how should a small firm handle them?
A data subject access request is when an individual asks what personal data you hold about them and how you use it. Laws such as GDPR and POPIA give people this right. Handle it by verifying identity, searching your systems, and responding within the legal deadline. This is general information, not legal advice.
GDPR generally expects a response within one month, with limited extensions. Check the deadline in your jurisdiction.
Preparation helps: keep an up-to-date list of where personal data lives, including spreadsheets and exports, so that you can find it. Reporting and analytics copies count too, which is another reason to keep personal data out of them where possible. Rules differ by country and sector, so check how this applies to you with a qualified adviser.
Want this applied to your business? Zansa builds dashboards and forecasts for small and mid-sized companies worldwide. Start with a free intro call.
Book a call