Dsar compliance (UK)
DSAR compliance refers to an organisation's adherence to the UK General Data Protection Regulation (UK GDPR) and Data Protection Act 2018 when handling Subject Access Requests (SARs), including those related to CCTV footage. It requires organisations to respond to requests within one month, provide requested data where possible, and justify any exemptions claimed.
What is this?
A DSAR (Data Subject Access Request) is a formal request made by an individual to access their personal data held by an organisation. Under UK GDPR, organisations must comply with DSARs unless exemptions apply, such as where disclosure would prejudice law enforcement or national security. CCTV compliance checks specifically focus on ensuring that footage containing identifiable individuals is handled in line with DSAR obligations, including secure storage, retrieval, and redaction where necessary.
Key legal requirements
- Respond to DSARs within one calendar month of receipt
- Provide a copy of the requested personal data in a commonly used format
- Justify any exemptions claimed under UK GDPR or Data Protection Act 2018
- Ensure CCTV footage containing identifiable individuals is retrievable and redacted appropriately
- Maintain records of DSAR processing and compliance decisions
Why this matters
Failure to comply with DSARs can result in enforcement action by the Information Commissioner's Office (ICO), including fines or reprimands. For CCTV systems, non-compliance risks reputational damage, legal challenges, and potential data subject complaints, particularly where individuals' rights to access their data are denied or delayed without valid justification.
Next step with VetroCheck
Use the CCTV Compliance agent if you want a structured review of the relevant documents and supporting record.
Compliance note
This glossary content is provided for informational and educational purposes only. It does not constitute formal legal advice, does not create a solicitor-client relationship, and should be checked against current legislation, official guidance, and the facts of the specific case.
At a glance
- Definition
- DSAR compliance refers to an organisation's adherence to the UK General Data Protection Regulation (UK GDPR) and Data Protection Act 2018 when handling Subject Access Requests (SARs), including those related to CCTV footage. It requires organisations to respond to requests within one month, provide requested data where possible, and justify any exemptions claimed.
- Term
- Dsar compliance (UK)
- Category
- Public Law
- Last updated
- Keywords
- UK, Public Law, public