
Information Governance
Healthcare Breach Response at Scale: 750K Patients, One Month
Morae processed 750K patient records across 160+ hospitals in one month with flat-rate breach response.
Case Study

A former employee submitted a DSAR following their redundancy from a research role, alleging that legitimate health issues and related absences were unfairly considered in the redundancy decision. The request sought access to personal data related to the redundancy process and the performance assessments leading up to it.
The volume of data collected was substantial — almost 2.9 million documents were published in the workspace, driven by the data subject's generic name and involvement across multiple departments.
Through refined search parameters, additional analysis, and the exclusion of irrelevant data, the review population was reduced by 80–95%, significantly reducing the client's costs. The DSAR was completed within the regulatory timeframe, balancing the client's need for cost-efficiency with full compliance. Despite the immense initial data volume and challenges posed by overly broad search terms, Morae delivered a cost-effective and defensible outcome.