Subject Access Request (SAR) Support
Under UK GDPR and the Data Protection Act 2018 and Data (Use and Access) Act 2025, individuals have the right to access the personal data organisations hold on them. Responding to a SAR can be time-consuming, complex, and carries legal risks if handled incorrectly, especially when the organisation holds a lot of personal data about the requester.
At Hope & May, we provide organisations of all sizes with expert SAR redaction and support services – ensuring compliance and reducing the administrative burden. We have real world experience dealing with these requests, offering practical ways of processing these requests, based on the resources available to an organisation.
Why SAR Support Matters
Responding to a SAR isn’t just an administrative exercise – it’s a legal obligation. Processing an SAR incorrectly could have severe consequences, including:
- Regulatory enforcement and fines for late, incomplete, or incorrect responses.
- Data breaches caused by disclosing information that should have been withheld.
- Legal claims from individuals whose rights have been compromised.
- Reputational damage that can erode stakeholder trust.
- Operational disruption, as staff are pulled away from core duties to deal with the fallout.
What does Hope and May’s SAR support service include?
- Liaising with the requester to process the SAR by acknowledging the request, defining the timeline for response and being the point of contact, and informing them about their rights
- Extending the deadline for the request if the request is complex, and assistance to justify a complex request
- Defining Scope by meeting with your organisation and understanding the data in question.
- Assistance in narrowing the scope by liaising with the requester and explaining a reasonable search.
- Assessing Exemptions by explaining to you the different exemptions available under the UK GDPR and when they are applicable to an SAR
- Expert Redaction – Carefully redacting third-party information, privileged legal content, or data exempt from disclosure.
- Documentation & Audit Trail – Providing a clear record of how the SAR was processed.
- Deadline Management – Ensuring responses are completed within statutory timescales.
Why work with Hope & May?
- Extensive experience supporting organisations across multiple sectors.
- Cost-effective outsourced support, saving staff time and reducing risk.
- Trusted for practical, jargon-free advice that makes compliance manageable.
With Hope & May managing your SAR process, your organisation can stay focused on day-to-day priorities, confident that you remain compliant and that stakeholder trust is protected.