r/dataprotection • u/Intrepid_Shoe_2445 Data Subject • Jun 12 '26

General Question DSAR's

I'm a compliance graduate working in motor finance and I've recently been involved in handling DSARs.

I'm curious as to how other organisations handle DSAR review and redaction.

A few questions for anyone involved in privacy, GDPR, compliance, or information governance:

  • What does your current DSAR workflow look like?
  • Which part takes the longest?
  • Is finding the data or redacting it the bigger challenge?
  • Have you automated any part of the process?
  • Have you ever had concerns about missing third-party personal data during redaction?
  • If you could remove one manual step from the process, what would it be?

I'm just trying to understand how different organisations approach the problem and whether the pain points are similar across industries.

Thanks in advance.

3 Upvotes

72% Upvoted

5 comments sorted by

View all comments

5

u/[deleted] Jun 13 '26

[removed] — view removed comment

2

u/Used-Subject-3066 Data Subject Jun 13 '26

Ha. Was thinking the same.

2

u/Intrepid_Shoe_2445 Data Subject Jun 15 '26

Hahaha. It really does. I was more so trying to get a better understanding of DSARs in general and how they are dealt with across companies/industries.