iManage Work and Data Subject Access Requests (DSARs)
An efficient approach to meeting compliance obligations for the collection of data
By submitting a DSAR, an individual can request access to any content that contains personally identifiable information, including their name, address, email, telephone number, etc. There is no charge for this process and the company or firm has 30 days to produce the information in a readable format.
Although responding to a request is mandatory, organisations can apply proportionality to them. If searches for data return hundreds of thousands of documents and emails, it is reasonable to reconsider the search terms or filters used in the search in order to reduce the volume to a reasonable and proportionate amount for review. In many cases, the data subject will be in discussions with the company or firm to help pinpoint the data being requested and to negotiate concessions.
The GDPR also contains guidance on how to review data that contains the personal data of both the requesting data subject and that of other individuals.
With the volume of content stored in iManage Work, finding and extracting the content, especially if the data subject is a current or ex-employee, can be both complex and time consuming.
Stay in the Know
Subscribe to our newsletter for the latest news about legal, risk, and compliance issues.