Failure to handle Subject Access Requests – #1 Complaint at the DPCs Office

The Irish Data Protection Commissioner, Helen Dixon, has emphasised that the GDPR retains the requirement that DPAs handle every complaint lodged accordingly. This includes the failure to deliver on the rights of access, for example, which already comprise more than 50 percent of the complaints her office deals with now. [See full article here.]

Businesses have one month to respond to Subject Access Requests and need an efficient, transparent and compliant process for managing them.  It’s important that businesses put their customers first and can provide them with this information but they also need to protect themselves.  For instance, businesses should ensure they have;

  • Full audit trails from when the request was received right through to completion
  • The ability to send the data digitally when the request was received digitally
  • The ability to send data securely and encrypt it
  • The ability to demonstrate how the ID was verified

If you haven’t already, now is the time to make sure you put the right processes in place for managing Subject Access Requests efficiently and compliantly. For information on how Wizuda can help, click here.

the challenge - wizuda case studies

The board of a multinational medical device organisation required a secure, cloud-based solution which facilitated virtual board member collaboration on key documents in preparation for monthly board meetings.

The documentation was regularly of a highly commercially sensitive nature, largely relating to ongoing clinical trials, and as such demanded a secure and encrypted platform which could be implemented without the engagement of internal IT resources.

Key challenges that need to be  considered:

  • Geographically dispersed stakeholders
  • Highly commercially sensitive documentation
  • No internal IT involvement
  • Multiple stakeholders required to collaborate on
    single documents
the solution- wizuda case studies

Wizuda MFT gave them a centralised view of all their file transfer activities and a network overview of the data flows. IT now had instantly available reporting and could provide geographic maps and network overviews to senior management of all file transfer activities in the organisation. These could also be categorised in ways that made sense for the business from a priorities perspective. Wizuda’s unique ‘Health Check’ dashboard with automated monitoring and alerts, allowed them to manage all transfer operations proactively and ensured they were always on top of any issues.

From a GDPR compliance perspective, transfers could be linked to Data Protection Impact Assessments were required and data could be anonymised as part of the transfer process. Wizuda MFT enabled them to apply the latest security protocols for file transfers and encrypt data at rest and in transit. Passing cyber-security and GDPR compliance audits became a lot easier.

About Wizuda

Developing IT Solutions to Make Businesses Better

At Wizuda we focus on developing IT solutions which help businesses grow and empower people to collaborate and stay connected securely and compliantly. Specialists in secure data transfer since 2001, all development and support operations are carried out from our two Irish 

offices located in Dublin (Wizuda Headquarters) and Limerick. We pride ourselves in developing software solutions that allow organisations to take back control of their file transfer and data sharing operations, enabling them to operate efficiently, securely and compliantly

Quick Contact