DSAR Response Services for UK Organisations
Help your organisation respond to a Data Subject Access Request accurately and within the required timeframe.
We help UK organisations manage Data Subject Access Requests (DSARs), from the initial assessment and search through to review, redaction and disclosure.
Whether you have received an employee DSAR, a complex request involving large volumes of information or simply need an independent review before responding, we can support you with the whole process or step in where you need us.
Responding to a DSAR: Organisations will normally need to respond to a Data Subject Access Request within one month. however you may be able to benefit from a two month extension. Click here
We’ve worked with organisations across multiple sectors including WarnerMedia, Yum! Brands, Burberry, Expedia and Société Générale on DSAR compliance matters and we’re confident we can help you.
Clara Westbrook
25+ Years PQE
Founder | Qualified Solicitor | Data Protection Specialist
07976 939 016
Common issues we see
Something that crops up surprisingly often is that organisations will often keep personal data beyond its retention period. This can spell trouble because an organisation will still have to find and disclose this information, adding pressure and requiring additional resources to locate and review it. This will also have to be done within the same timeframe of one month.
We’ve also seen instances where organisations allow their employees to use AI software, such as Copilot, without any policies in place. This can lead to employees misusing it for their personal benefit, such as asking it to draft complaints about other employees or changing the narrative to suit their agenda. Copilot in return will generate reams of information to assist them in doing this and can often be repetitive in nature. This information will also need to be reviewed and disclosed if it contains the personal data of the individual making the DSAR.
In these instances, it is always worth reviewing retention periods and implementing new policies before introducing new software. This will also avoid additional information being disclosed unnecessary.
What we need from you:
1
The date the Subject Access Request made received.
2
The current deadline to respond by.
3
The volume of data that has been searched and included.
Costing structure
We’ve broken down our DSAR support prices below. If you have any additional questions, we’d be happy to help.
What might this request cost us?
We estimate the days based on how many documents you supply to us. For example, you may have a batch of 10,000 emails. This would work out at 1,000 emails a day. So 10 days plus redaction time which may take another 5 to 10 days depending on number of disclosable documents. We charge out our privacy analysts at £200 a day so the total costs for this service could be between £2,500 for 10 days or £3,000 for 15 days for our privacy analyst and an additional one off charge of £1,500 for onboarding and solicitor overview. All charges are VAT inclusive.
If you’d like to know more, view our comprehensive DSAR pricing and management details Click here.
Response Service | Description | Fee Structure |
Initial DSAR Strategy & Scope Review | High-level legal assessment of the request, identifying exemptions, and setting the response roadmap. | From £700 per day |
Managed Response Service | End-to-end handling, including data gathering, vetting, and drafting the final response. | From £450 – £700 per day |
Redaction Service | Specialist line-by-line review to remove third-party data and apply legal redactions. | £200 per day |
Final Compliance Check Only | A one-off professional “sign-off” of your prepared response before you hit send. We can offer a fixed fee depending on how involved we need to be. | £400 (Fixed Fee) |
Fixed Fee | We can offer a fixed fee depending on how involved we need to be. | Estimate fixed fee £400 – £5,000 |
Did you know, a two month extension can be applied if the request is considered complex
The ICO state that Data controllers can extend the DSAR response time by a further two months, giving a total of three months to respond where the request is complex or where a number of requests have been received from the individual relating to the individual’s GDPR rights.
Why organisations choose WDPS
We’ve handled DSARs involving over 20,000 documents. Supported organisations in employment disputes, reduced internal review time by a matter of weeks. As a solicitor-led organisation, we have over 25 years’ experience in data protection and privacy law and can often give insights that might otherwise be overlooked.
Our team can provide both the experienced oversight needed to make difficult decisions and the practical review resource required to work through large volumes of information.
Received a DSAR?
Speak directly with a data protection solicitor +44 (0)7976 939 016 (Mon – Fri: 9:00 am – 6:00 pm Sat: 10 – 4 pm). If you would like us to call or email you, please leave your details, and we will be in touch.
Westbrook Data Protection Services Limited,
2nd Floor, Midas House, 62 Goldsworth Road Woking, Surrey, GU21 6LQ
View our Privacy Policy here
Explore More Data Protection & Privacy Services
Our team have a deep understanding of the following areas of law and continue to add value to our clients’ businesses.
Latest Insights
- The GDPR Accountability Principle: From Paper to Practice
Accountability principle As a new consultant at Westbrook Data Protection Services, one of the first […] - Changes to employment law and the rise in Data Subject Access Requests
Changes to employment law and the rise in Data Subject Access Requests Employment Rights Act […]