G/SAR: A smarter solution to DSARs
Taking away the hassle and reducing the cost of Data Subject Access Requests.
G/SAR is Gateley’s technology powered service for responding to Data Subject Access Requests (DSARs) faster, more accurately, and at lower cost.
Using advanced document analysis technology, we interrogate your raw document set before our lawyer-led legal review begins. This dramatically reduces the volume of documents requiring our review. The outcome is decisive: faster delivery, lower fees, and greater accuracy. This is G/SAR.
G/SAR operates on a true fixed fee basis. We’ll analyse your document set, assess the likely efficiency gains from our technology and provide you with a no-obligation quote. You only pay if you’re happy with the quote and want to proceed.
When G/SAR can help
We can help with any DSAR, whether made by an employee, customer or other individual. Our technology solution provides maximum benefit where there is a large volume of documents, especially where there may be a large number of duplicate documents or email chains, but our data protection experts can help you with a DSAR of any size or nature.
There’s no need for you to have any prior experience of dealing with DSARs to use our G/SAR service – we’ll point you in the right direction on the initial consultation. However, G/SAR is also useful for organisations which are familiar with dealing with DSARs and looking for a more efficient way of doing so.
How G/SAR benefits your organisation
- Workload reduction: Typically a 50% to 90% reduction in the number of documents that need to be reviewed. Letting our team handle your DSARs takes the pressure off your own internal team, allowing them to get on with the day job.
- Confidence in compliance: Our G/SAR service is powered by technology, but every item of personal data identified will be subject to human approval by our experienced data protection experts. This combination helps us to deliver value for money and a service you can trust.
- Cost savings: Getting external support to deal with DSARs can be expensive. A typical review will cost £5,000 to £7,000, including redactions and preparation of the cover letter.
- Cost certainty: G/SAR utilises analysis technology to create a streamlined, review ready document set. Only then do we price the work. This gives true pricing certainty and ensures you never pay for reviewing irrelevant or duplicate material. You are free to decide not to proceed after you’ve received our quote.
The G/SAR process
Step 1: Scoping the search
We can help you with:
- determining a scope for the search;
- preparing an initial response to the requestor (including proposing a search scope and extending the response period, if required).
Step 2: The review exercise
Once you’ve completed the search, send us the results through our secure file transfer service. We’ll complete the review and provide you with:
- the personal data for disclosure (with any relevant extractions or redactions);
- a record of the documents we are recommending withholding (with reasons);
- a draft response cover letter.
Step 3: Complaints
We can assist with:
- considering any complaint made by the requestor and providing a response to the complaint;
- dealing with any ICO investigation;
- any court proceedings issued by the requestor alleging failures in the DSAR response.
G/SAR Enterprise
Do you receive DSARs on a regular basis? If you do, G/SAR Enterprise is designed for you.
G/SAR Enterprise is the premium version of our service for organisations that handle DSARs regularly. It offers a scalable, repeatable approach with added support and operational benefits at no extra charge.
Predictable pricing, clearer budgets, no surprises
We can offer a standard fixed fee for each DSAR to give you more budget certainty. This covers all work across steps 1 to 3 in the process outlined above, excluding ICO investigations and court proceedings.
G/SAR Enterprise also includes added-value support at no extra cost
More than case handling – G/SAR Enterprise includes extra support that helps your process improve over time.
- An initial no-obligation consultation with a data protection expert.
- A bespoke process manual setting out your requirements, our approach and agreed service levels.
- A named contact within our data protection team.
- An annual review with recommendations to improve data management and reduce DSAR impact over time.