Answer a candidate subject access request

Find, redact and send their data within one calendar month.

1. Log the request and the date it came in. Most people forget this: The month starts when it arrives, even if a consultant opens it late
2. Check who is asking
3. Search the CRM, inboxes and notes
4. Search messages and call notes
5. Remove client and other people's data
6. Approve the response (Data protection lead signs off)
7. Send securely and log it

All recipes