If a company has not provided all of your data in response to your GDPR subject access request (SAR), there are several steps you can take to follow up with, and ensure your rights are upheld. We can assist you with this:
1. **Follow Up**: As soon as you can, we recommend sending a follow-up communication to the company, informing them that their response to your SAR is not complete and that it is missing data that should be included – be specific if you can. Include details such as the date you originally submitted the SAR and any reference numbers provided by the company.
2. **Escalate Your Concerns**: If the company does not provide a satisfactory explanation for the omitted data, consider escalating your concerns to a higher authority within the organisation, such as a supervisor, manager, or the company’s Data Protection Officer (if they have one).
3. **Request Assistance from the ICO**: If the company continues to refuse to, or fails to provide a complete response, you have the right to lodge a complaint with the relevant data protection authority, such as the Information Commissioner’s Office (ICO) in the UK. The ICO can investigate your complaint and take enforcement action against the company if they find that GDPR violations have occurred. (see the link to the ICO at the top of this page)
5. **Consider Legal Action**: As a last resort, you may choose to seek legal advice and consider taking legal action against the company for non-compliance with GDPR requirements. This could involve initiating legal proceedings to compel the company to respond fully to your SAR and provide the missing information. In some circumstances you may be able to seek compensation for any damages or losses suffered as a result of the company’s failure to comply.
It’s important to document all communication with the company regarding your SAR, including dates, times, and any responses received. This documentation will be valuable if you need to escalate your concerns to the ICO or pursue legal action. Additionally, remain persistent in advocating for your rights and don’t hesitate to seek assistance or guidance from relevant authorities or legal professionals.
