By submitting a DSAR, an individual can request access to any content that contains personally identifiable information, including their name, address, email, telephone number, etc. There is no charge for this process and the company or firm has 30 days to produce the information in a readable format.

Although responding to a request is mandatory, organisations can apply proportionality to them. If searches for data return hundreds of thousands of documents and emails, it is reasonable to reconsider the search terms or filters used in the search in order to reduce the volume to a reasonable and proportionate amount for review. In many cases, the data subject will be in discussions with the company or firm to help pinpoint the data being requested and to negotiate concessions.

The GDPR also contains guidance on how to review data that contains the personal data of both the requesting data subject and that of other individuals.

With the volume of content stored in iManage Work, finding and extracting the content, especially if the data subject is a current or ex-employee, can be both complex and time consuming.

I’ve been working in the legal industry, initially as a consultant, for 20 years. My focus has been on Productivity, Risk, Governance and Knowledge, leading me to focusing primarily on document and knowledge management solutions. For the last 5 years my role has been pre-sales, working with customers to understand their problems, requirements and how we can help.

Ray Burch
Director of Sales Engineering