DSAR Response Service for UK Organisations
Help your organisation respond to a Data Subject Access Request accurately and within the required timeframe.
We help UK organisations manage Data Subject Access Requests (DSARs), from the initial assessment and search through to review, redaction and disclosure.
Whether you have received an employee DSAR, need help reviewing a large volume of information or want an independent check before disclosure, we can manage the process or support your team with a particular stage.
Responding to a DSAR: Organisations will normally need to respond to a Data Subject Access Request within one month. however you may be able to benefit from a two month extension. Click here
We’ve worked with organisations across multiple sectors including WarnerMedia, Yum! Brands, Burberry, Expedia and Société Générale on DSAR compliance matters and we’re confident we can help you.
Clara Westbrook
25+ Years PQE
Founder | Qualified Solicitor | Data Protection Specialist
07976 939 016
Can you help with employee or high-volume DSARs?
Yes. We can help with employee requests and DSARs involving substantial volumes of information, including assignments where your organisation has already collected the records and needs additional review or redaction support. Westbrook Data Protection Services
We organise the material, identify the personal data requiring disclosure and document decisions about duplication, third-party information and applicable exemptions.
The aim is an accurate, manageable response with clear reasons for the decisions made—not simply a smaller disclosure.
Healthcare DSAR: 8,122 pages reviewed and redacted in 14 days
A healthcare organisation approached WDPS with 8,122 pages requiring review and redaction and approximately 14 days remaining before its response deadline.
Our team organised the material into bundles, reviewed the records and completed the redaction work within the remaining period. The final disclosure was then transferred securely to the individual.
Read our healthcare DSAR case study →
What we need from you:
To assess the work and provide an estimate, we need to understand the request, the time available and the material involved.
1
The date the Subject Access Request made received.
2
The current deadline to respond by.
3
The volume of data that has been searched and included.
Costing structure
We’ve broken down our DSAR support prices below. If you have any additional questions, we’d be happy to help.
What might this request cost us?
We estimate the number of days based on the volume of documents you supply to us. For example, you may have a batch of 10,000 emails. This would work out at 1,000 emails per day, giving an initial review time of approximately 10 days. Redaction may then take another 5 to 10 days depending on number of disclosable documents. We charge out our privacy analysts at £200 a day so the total costs for this service could be between £3,000–£4,000 for 15-20 days, plus a one off charge of £1,500 for onboarding and solicitor overview. All charges are VAT inclusive.
If you’d like to know more, view our comprehensive DSAR pricing and management details Click here.
Response Service | Description | Fee Structure |
Initial DSAR Strategy & Scope Review | High-level legal assessment of the request, identifying exemptions, and setting the response roadmap. | From £700 per day |
Managed Response Service | End-to-end handling, including data gathering, vetting, and drafting the final response. | From £450 – £700 per day |
Redaction Service | Specialist line-by-line review to remove third-party data and apply legal redactions. | £200 per day |
Final Compliance Check Only | A one-off professional “sign-off” of your prepared response before you hit send. We can offer a fixed fee depending on how involved we need to be. | £400 (Fixed Fee) |
Fixed Fee | We can offer a fixed fee depending on how involved we need to be. | Estimate fixed fee £400 – £5,000 |
Can the DSAR response deadline be extended?
The ICO state that Data controllers can extend the DSAR response time by a further two months, giving a total of three months to respond where the request is complex or where a number of requests have been received from the individual relating to the individual’s GDPR rights.
Why organisations choose WDPS
We’ve handled DSARs involving over 20,000 documents. Supported organisations in employment disputes, reduced internal review time by a matter of weeks. As a solicitor-led organisation, we have over 25 years’ experience in data protection and privacy law and can often give insights that might otherwise be overlooked.
Our team can provide both the experienced oversight needed to make difficult decisions and the practical review resource required to work through large volumes of information.
Received a DSAR?
Speak directly with a data protection solicitor +44 (0)7976 939 016 (Mon – Fri: 9:00 am – 6:00 pm Sat: 10 – 4 pm). If you would like us to call or email you, please leave your details, and we will be in touch.
Westbrook Data Protection Services Limited,
2nd Floor, Midas House, 62 Goldsworth Road Woking, Surrey, GU21 6LQ
View our Privacy Policy here
Explore More Data Protection & Privacy Services
Our team have a deep understanding of the following areas of law and continue to add value to our clients’ businesses.
Latest Insights
- The GDPR Accountability Principle: From Paper to Practice
Accountability principle As a new consultant at Westbrook Data Protection Services, one of the first […] - Changes to employment law and the rise in Data Subject Access Requests
Changes to employment law and the rise in Data Subject Access Requests Employment Rights Act […]