Right of access (RoA) / data subject access requests (DSAR) policy and procedure

Retention of request and responses

All requests and responses should be retained in accordance with our retention schedule which details the period as 3 years, this allows for comparisons to be made with any previous requests and saves the organisation time in having to search through all systems/information again, the searches can take place from the date of the last request to the present day.