Handling Subject Access Requests


This course is available by: Classroom, Virtual-LIVE and eLearning


This course can be attended on an in-person basis at dedicated training venues (the yellow box below lists the upcoming dates and cities). There are ample opportunities to network with other delegates during coffee breaks and at the sit-down lunch.
Classroom Training Courses

Virtual-LIVE (WEBEX)

For those who prefer undertaking LIVE training remotely, PDP’s virtual courses allow delegates to interact directly with the trainer and to participate in group activities, mirroring the typical structure of Classroom sessions.
Virtual Training Courses


PDP’s eLearning courses are facilitated via a dedicated learning platform using videos, supplementary documentation and multiple choice self-assessment questions. The content can be viewed at any time allowing delegates to train around other commitments. Find out more information on PDP’s eLearning courses.

















 Handling Subject Access Requests


Course Overview:

Dealing effectively with Subject Access Requests (‘SARs’) remains a management challenge for many organisations. Requests can come from customers, employees, complainants, and others. The quantities of information typically held on individuals are increasing to vast proportions, sometimes as an unintended consequence of technological advances.

Following the latest guidance and requirements set out in the UK GDPR, Data Protection Act 2018, and the ICO’s latest guidance looks in detail at the right of individuals to gain access to their data, as well as the exemptions that organisations can use to withhold information. It gives delegates the information they need to set up an effective SAR handling process in their organisation, and looks at how to avoid the common pitfalls that arise. It includes:

  • determining whether a valid request has been made
  • liaising with the applicant to clarify the request
  • analysing whether particular manual (paper) records fall within the law
  • setting parameters for the search for information and collating the results
  • establishing whether the retrieved information is personal data
  • dealing with third party information
  • applying the relevant exemptions
  • presenting the response to the applicant including how to redact documents
  • managing dissatisfied recipients
  • how to deal with an investigation
  • staff awareness and training

Participants in this session work through a number of practical scenarios and will leave the session knowing how to respond to access requests as well as how to set up an effective SAR handling process in their organisation.

Attendance on this course can be used as credit towards gaining the Practitioner Certificate in Data Protection.

Course Trainer

Olivia Whitcroft

Olivia Whitcroft,

Trainer's biography
and other courses
by this Trainer

Robert Bond, Charles Russell Speechlys

Robert Bond
Data Protection,
Compliance & Ethics

Trainer's biography
and other courses
by this Trainer

Upcoming Training Dates
London (Classroom)Thursday, 05 September 2024
Virtual-LIVE (Teams)Thursday, 19 September 2024
Edinburgh (Classroom)Thursday, 10 October 2024
Manchester (Classroom)Thursday, 24 October 2024
London (Classroom)Thursday, 07 November 2024
Virtual-LIVE (Teams)Thursday, 21 November 2024


- Classroom - £595.00 plus VAT
- Virtual-LIVE (WEBEX) - £495.00 plus VAT
- eLearning - £395.00 plus VAT

Additional Information:

- Classroom/Virtual-LIVE - 10.00am to 4.00pm
- eLearning - on-demand training available immediately

Discounts available:
Classroom / Virtual-LIVE:
10% discount for additional delegates for this course when booked together

20% discount for additional delegates booked together (up to 5). Group Licences also available

Who should attend:
Data Protection Officers, Information Officers, Privacy Officers, Compliance Officers, Information and Commercial lawyers (in-house and private practice), Office Managers, Human Resources Officers, Records Managers, and others.



Practitioner Certificate in Data Protection (PC.dp.)


Practitioner Certificate in Freedom of Information (PC.foi.)




View training courses by:


Course Testimonials

“Very informative course with lots of great examples. The tutor was very knowledgeable and the content was easy to follow.”
Cerys Entwistle
DFS group & Learning Service

“Very knowledgeable practitioners, providing valuable insight into data protection matters. Engagement for attendees was excellent due to the utilisation of quizzes and break out rooms.”
Richard Ojera
Barnet Education & Learning Service

“I enjoyed the movement of the eLearning training between video and reading content. This I found helpful as the reading part allows you in your mind to reinforce what you learnt from listening to the video.”
Nydia Mawusi
Berkshire Healthcare NHS Foundation Trust

“Very informative course with lots of great examples. The tutor was very knowledgeable and the content was easy to follow.”
Cerys Entwistle
DFS group

“The eLearning SARs session was very informative. I enjoyed the course!”
Hannah Carter
MFG Motor Fuel Group

“The videos were brilliant. I thought the eLearning course design worked well.”
Sara Potter

“The course was very informative and I prefer having it as eLearning. The content was just right! Having limited knowledge of this subject prior to completing the course, I am now more confident in understanding the different roles and responsibilities and various legislation around the disclosure of information.”
Ajaz Riaz
Her Majesty's Passport Office

“I found the eLearning course really useful as I am the person who processes the subject access requests. I liked the video at the beginning of each section as it sets the stage and then the reading material reinforces what was mentioned in the video. Some of the quizzes at the end were a bit difficult, especially the one in section 5a.”
Raquel Farmer

“Fantastic eLearning course! Absolutely loved it!”
Nigel Rubwe
Kent, Surrey & Sussex Community Rehabilitation

“I found the eLearning course very useful and informative. The way the chapters was structured with an initial video followed with more in depth details was, I felt, very good and the short test helped to identify whether or not you had understood the chapter. Being able to complete the course at your own pace was beneficial to me.”
Stuart Skippings

“Very comprehensive coverage with helpful examples, reference to cases and it was helpful to see comments on the proposed changes in the Bill.”
Derbyshire Fire & Rescue Service

“The materials are particularly useful.”
Louise Flanagan
Pension Protection Fund

“The trainer was very knowledgeable and explained things clearly.”
Julia Brenchley
Gloucester Constabulary

Sandra Collins
Bank of England

“Particularly useful were the practical issues – applying the Act to real situations.”
Elizabeth Hiley
General Medical Council

“Very informative about the SAR process – most useful.”
Neil Gorman
Barclays Bank

“Enjoyed the workshops & practical examples”
Jade Ince

“Excellent course.”
Vicky Payne
London Borough of Havering

“A highly interactive session – very useful in clarifying understanding.”
Stephanie Allen
Littlewoods Home Shopping