SAR Data

[gmail]

When a SAR is made to an employer and they send the data electronically, once downloaded by the person that made the SAR does the data then belong to them regardless of whats contained in the files?

Edited March 5, 2022 by gmail

[dx100uk]

in terms of what?

explain.

[gmail]

10 minutes ago, dx100uk said:

in terms of what?

explain.

Their failure to redact others personal information although it had been stated that all redactions had been made previous to downloading the SAR data.

 

Now that its been pointed out to the employer they are requesting the data be deleted and have gave a timeframe. Almost like threat.

 

 

 

Edited March 5, 2022 by gmail

[BankFodder]

You are under no obligation to delete the data. On the other hand, it may be subject to a duty of confidentiality.

It seems to me that the data processor which has released stated to you are themselves in breach of the data protection act.

If you are able to contact the people whose identities have been revealed, then I think you would be perfectly entitled to let them know that their private data has been disclosed to you.
It will be helpful if you let us know more about it