CoreStream is delighted to announce the release of a new version of Information Asset Manager to include Subject Access Requests.

What is a Subject Access Request?

The right of access, commonly referred to as a Subject Access Request, gives individuals the right to obtain a copy of their personal data as well as other supplementary information. It helps individuals to understand how and why you are using their data, and check you are doing it lawfully.

How can CoreStream help with Subject Access Requests?

Recital 59 of the GDPR recommends that organisations ‘provide means for requests to be made electronically, especially where personal data are processed by electronic means’.

CoreStream Information Asset Manager includes an online Subject Access Request form that enables individuals to submit Subject Access Requests to the Data Compliance Officer (DCO) for approval. If the DCO decides to accept the request, they can trigger the generation of tasks to the relevant Access Request Owners within the business to subsequently action (e.g. prepare data for sharing with the subject, data erasure etc.). The system then tracks the completion of tasks, and the closure of Subject Access Requests once all actions have been completed.

For Subject Access Requests received verbally or in writing, the system enables the requestor to select the mechanism for the request and upload evidence (if required).

What are the benefits of bringing Subject Access Requests online?

• Standardised online forms can make it easier for organisations to recognise a subject access request and ensures that the requestor can capture all the details you might need to locate their information.
• Reduces the ongoing cost of managing Subject Access Requests through a simple browser based interface.
• Allows for consistent reporting of Subject Access Requests, with real-time reports available at the click of a button.