I just received a DSAR — what should I do first?

First, don't panic. Log the request immediately with today's date — your 30-day deadline starts now. Send a brief acknowledgment email to confirm you received the request. Then verify the requester's identity before proceeding. These first steps take about 15 minutes and ensure you're tracking the deadline correctly.

How urgent is a DSAR response?

You have exactly 30 calendar days from receiving the request to respond. This is a legal deadline under GDPR Article 12. Missing it can result in complaints to the Data Protection Authority and potential fines. However, 30 days is enough time to respond properly if you start immediately and work systematically.

Can I respond to a DSAR myself or do I need a lawyer?

Most small businesses can respond to DSARs without a lawyer. You need to: verify the requester's identity, search your systems for their data, redact third-party information, compile the response, and keep records. Software tools like SAR Portal guide you through each step. Lawyers are typically only needed for complex situations or disputes.

What if I don't have time to respond within 30 days?

If the request is genuinely complex or you've received multiple requests, you can extend the deadline by up to 2 additional months. However, you MUST inform the requester within the original 30 days, explaining why you need more time. You cannot extend simply because you're busy — the request must be objectively complex.

Just Received a DSAR? Here's What to Do Right Now

Don't panic. You have 30 days to respond, and we can help you do it correctly. Thousands of businesses have used SAR Portal to respond on time.

Start Responding Now See the 15-Minute Plan

⏰

30 Calendar Days

Your legal deadline to respond

2,500+

DSARs handled

98%

On-time responses

10 min

Setup time

24 hrs

Typical first response

Your 15-Minute Action Plan

Do these 4 things right now to get your response started

Log the Request Immediately

Record the exact date and time you received the request. Your 30-day countdown starts NOW, not when you read it or forward it to someone else.

2 minutes

Don't Delete Anything

Do NOT delete any emails, files, or records related to this person. Deletion after a DSAR is received could be considered obstruction.

Immediate

Send an Acknowledgement

Reply to the requester confirming you've received their request. This buys goodwill and shows you're taking it seriously.

5 minutes

Start Your Response Process

Use SAR Portal to verify identity, search your systems, redact third-party data, and generate a compliant response package.

8 minutes to setup

What SAR Portal Does For You

Everything you need to respond correctly and on time

📅

Deadline Tracking

Automatic 30-day countdown with email reminders so you never miss a deadline.

👤

Identity Verification

Built-in OTP verification to confirm the requester is who they claim to be.

🤖

AI Redaction

Automatically detects and redacts third-party personal data from your documents.

📋

Evidence Pack

Generates a complete audit trail that proves compliance to regulators.

🔒

Secure Delivery

Encrypted portal for safe data delivery - no more emailing personal data.

🎯

Response Templates

Pre-written, legally-compliant response letters ready to customise.

DSAR Response Guides

In-depth guides to help you respond correctly

📖

Start Your Response Now

Setup takes 10 minutes. Most businesses send their first response within 24 hours.

Start Free Trial

14-day free trial. No credit card required. Cancel anytime.