Meet the Other Phone. Protection built in.

Meet the Other Phone.
Protection built in.

Buy now

Please or to access all these features

Work

Chat with other users about all things related to working life on our Work forum.

GDPR - Will my manager be alerted regarding a data subject access request?

11 replies

ByHazelTraybake · 19/02/2024 16:46

Hello there, would be so grateful for any advice you may be able to help with if possible please.

I work for a very large organisation, and wondered when submitting a DSAR, is it okay to mention the specific people that I would like to see mentions of my name in, within their emails? Want to ensure that this is narrowed down as much as possible.

Also, will the people listed be made aware? Or will this be collated by the privacy/HR teams without them knowing?

Thank you so much in advance for all your help.

OP posts:
OneRingToRuleThemAll · 19/02/2024 16:47

I work in this field, and the people listed will be made aware because they will be instructed to go into their inbox / teams chats to retrieve any data held.

parietal · 19/02/2024 16:50

At my organisation, everyone gets an email to say "your email will be searched next week for a DSAR for person X" and then it happens.

ByHazelTraybake · 19/02/2024 16:52

@OneRingToRuleThemAll thank you so much for your helpful reply.
Sorry for all my questions, how would it work if I asked for all emails mentioning my name for a time period and didn't refer to specific names? Thank you so much again.

OP posts:
ByHazelTraybake · 19/02/2024 16:55

@parietal , thanks so much for your reply. Do they mention the person specifically?

OP posts:
winefortea · 19/02/2024 17:08

parietal · 19/02/2024 16:50

At my organisation, everyone gets an email to say "your email will be searched next week for a DSAR for person X" and then it happens.

Doesn't that just tip people off to delete anything they don't want to share? Or do they check the deleted ones too?

parietal · 19/02/2024 18:38

I believe they check the deleted emails too.

parietal · 19/02/2024 18:40

And yes, the name of the person putting in the request is clear

MadCatLady27 · 19/02/2024 21:21

In ours we get IT to run a search of the organisation involved's mail boxes which includes everyone in said organisation. I'm not sure of the specifics behind it but deleted emails do come up - I'm not sure if this is just deleted once or if it also includes those deleted from the deleted box.

They would need the name of the person putting in the request to be able to search the emails for said name.

I haven't generally dealt with ones from staff though, so unsure who is informed about those, I'd imagine it depends who deals with sars in your company (eg DPO or other) and also how the email search is conducted.

Purplehue13 · 19/02/2024 22:37

It’s best to make your request as specific as possible, I.e. including the names of the peoples mailboxes you want searched, along with any specific terms. This is more likely to get you the information you’re looking for.

Harrysutton · 19/02/2024 22:39

OneRingToRuleThemAll · 19/02/2024 16:47

I work in this field, and the people listed will be made aware because they will be instructed to go into their inbox / teams chats to retrieve any data held.

Surely the IT team would do this, too much room for error asking individual staff.

PaulAnkaTheDoggo · 20/02/2024 00:16

Make sure you are as specific as possible. If your company uses more than Teams and email to communicate make sure each specific platform is mentioned. Remember that most individuals names will be redacted and you will only receive very specific data which mentions specifically what you’ve requested. So full name, employee number etc.

New posts on this thread. Refresh page
Swipe left for the next trending thread