Practical SAR compliance guides for UK SMEs — deadlines, exemptions, templates, and more.
30 July 2026
The difference between a subject access request and a right to erasure request under UK GDPR — how to recognise each, respond correctly, and handle combined requests.
23 July 2026
How UK employers should handle third-party personal data when responding to a subject access request — when to redact, how far to go, and the common mistakes that trigger ICO complaints.
16 July 2026
How UK data protection law applies to subject access requests — the key statutes, what each one requires of employers, and the 2025 changes that affect SMEs.
9 July 2026
What UK employers must do when a SAR covers CCTV footage — which footage to disclose, how to redact third parties, retention obligations, and common ICO complaint triggers.
2 July 2026
Free DSAR template examples for UK employers — acknowledgement, extension notice, and response cover letter — with guidance on adapting each for your SAR.
25 June 2026
What UK GDPR requires of employers when a subject access request arrives — the right of access, your obligations, the 2025 law changes, and where SMEs go wrong.
18 June 2026
How to set up a repeatable subject access request process for a UK SME — the workflow stages, who does what, and how to make every SAR defensible to the ICO.
11 June 2026
How UK employers respond to a subject access request — the one-month deadline, ID verification, search scope, exemptions, and the audit trail the ICO expects.
5 May 2026
How to redact third-party data and apply exemptions in SAR responses — what UK employers can remove, what they must keep, and how to document redaction decisions.
28 April 2026
How to handle a SAR during tribunal proceedings — your legal obligations, exemption decisions, timing considerations, and what happens if you get it wrong.
21 April 2026
How to create an internal SAR policy for UK employers — who handles requests, response steps, escalation rules, and a practical template to adapt.
14 April 2026
How to write a SAR response letter step by step — what to include, how to structure it, and sample formats for straightforward and complex employer responses.
7 April 2026
What a DSAR means for UK employers — how to recognise one, what you must do in the first 24 hours, and the practical steps to respond without missing the deadline.
31 March 2026
What to include when responding to an employee subject access request — data categories, search scope, exemptions, and a practical response template for UK employers.
24 March 2026
When UK employers can and can't charge for a subject access request — the free-of-charge rule, the two exceptions, and what the DUAA 2025 changes.
17 March 2026
Free SAR response templates for UK employers — acknowledgement, identity verification, extension notice, response cover letter, and exemption explanation letters.
10 March 2026
Which DPA 2018 exemptions let UK employers withhold data from a subject access request? Legal privilege, management forecasts, negotiations, references — explained with examples.
3 March 2026
What UK SMEs should look for in DSAR software — key features, pricing tiers, and why enterprise privacy platforms are the wrong fit for small employers.
24 February 2026
UK SAR deadline rules explained — the 1-month time limit, 2-month extensions, and the new DUAA 2025 stop-the-clock mechanism that pauses the clock for identity verification.
17 February 2026
Step-by-step guide for UK employers responding to employee subject access requests — deadlines, exemptions, redaction, and building an audit trail the ICO expects.
dsartracker guides UK SMEs through every step of a subject access request. Join the waitlist for early access.