GDPR: Procedure for "Subject Access Request"

GDPR states that “individuals have a right to access their personal data” (ICO Website). Businesses should have a procedure in place in the event of a client information request (aka subject access request). If a client makes a request, the information should be provided within one month and no charge should be made to the client.

The latest update to VIA Voyager enables you to smoothly provide information to the client in a professional manner in a couple of steps. In addition to the below there are a number of other pieces of information which you should provide the client with which are detailed on the ICO website and you can cover these in your privacy notice.