Back to Services

DSAR Response Service

When a Subject Access Request lands, the clock starts. You have 30 days. We make sure you use them wisely.

Engagement model

Triage → Process → Deliver → Review

15 DSARs, zero ICO complaints

Tell me what's broken

The Problem

UK GDPR Article 15 gives every individual the right to request all personal data you hold about them. Missing the 1-month deadline triggers ICO complaints, potential enforcement action, and reputational damage. Most SMEs have never processed a DSAR and panic when one arrives.

What I Deliver

01

DSAR Triage (Emergency Response)

Same business day

Initial assessment within 4 hours of receiving your forwarded request.

  • Determine if the request qualifies as a valid DSAR
  • Identity verification guidance
  • Scope clarification letter drafted
  • Deadline calculated and communicated
  • Triage report + acknowledgement letter ready to send
02

DSAR Processing Support

5–10 business days

Everything in Tier 1, plus full response package preparation.

  • Search scope definition (systems, data, date ranges)
  • Search checklist customised to your systems
  • Redaction guidance (third-party data, legal privilege, confidential references)
  • Redaction quality review
  • Response package structure
  • Cover letter and information sheet drafted
  • Complete response package ready for your review and dispatch
03

DSAR Managed Service (Retainer)

Ongoing

Everything in Tiers 1 and 2, plus ongoing DSAR function management.

  • Ongoing DSAR log maintenance
  • Staff training materials (recognising DSARs, immediate actions, escalation)
  • Quarterly compliance review
  • Complex scenario handling (solicitor requests, repeated requests, requests during disputes)
  • ICO correspondence support
  • Fully managed DSAR function

My Authority

This service is built on:

  • 8 ICO DSAR guidance documents (right of access overview through exemptions)
  • UK GDPR Articles 12–23 (all data subject rights)
  • DPA 2018 Schedule 2 exemptions
  • DSAR case law analysis
  • 943-line DSAR Processing Procedure with templates for every stage
  • Redaction decision tree
  • Complete DSAR log template with 20+ tracking fields

Interested in this service?

Describe the problem. I'll scope a solution and explain exactly what you'll get.

15 DSARs, zero ICO complaints

Email hello@anomalyops.com

AnomalyOps provides information and compliance operations support, not legal advice. We are not a law firm and are not regulated by the Solicitors Regulation Authority. For legal advice, we recommend consulting a qualified solicitor.