The ICO have produced more detailed guidance on how to handle a Subject Access Request. This is currently in draft form but is very useful. Processing a SAR is vitally important to every company, failure to respond to a SAR could result in a fine and enforcement action! One of the biggest problems is that a data subject can issue a SAR verbally, by email, by social media, by post, or by any other means. The company then has to process this SAR which could involve a huge amount of time and effort. This seems fundamentally unfair and potentially devastating for small companies. Take look at this blog from the ICO and feel free to respond to request for input. Don’t forget that SARS are important - if you have any questions feel free to call anytime.
Click here to see the ICO's blog.
Good luck all!