Subject Access Request (SAR) Knowledge Check

What is the fee for a subject access request?

If a person makes a subject access request verbally we do not need to comply with this request?

How long do you have to comply with a SAR?

A SAR can’t be made by a 3rd party.

You receive a SAR from an individual which is now their 4^th separate request in a 4 month period, do you need to comply with this request?

A SAR is submitted from an individual but without confirmation of their identity and you have a number of similar named ex colleagues, what do you need to do?

You receive a SAR and within the personal data there is information which identifies another person. You do not have to release that information with this SAR.

Your organisation is the Data Controller and you use another company as your Data processor. That means you don’t need to comply with the received SAR as the processor will do it.

You are a small company and the person who normally deals with the SARs is away on extended holiday when a straightforward SAR is received, so you decide to extend the request for 3 months until that staff member is back at work. Is this the correct procedure?

You receive a SAR request from a 13 year old, you decide not to respond to this request as it came from a child and not an adult. Is this the correct action?