What construction companies need to know about data requests Chamber welcomes high ying coaching team

It could be a client, contractor, employee or supplier, and they can ask for a copy of their information as a “Data Subject Access Request” (DSAR). Responding appropriately is a legal requirement.

GDPR (General Data Protection Regulation) and data specialist Judith Andrews from Business Tamer explains what’s involved.

“A DSAR can create a lot of work, especially if you’re unprepared,” she said.

“It’s usually used to check what information is held, how long it’s been kept, why, if it’s been shared with a third party, where it came from and who can access it.

“I recently helped a construction business respond to a S from a dissatisfied client disputing an invoice. The request was potentially being used to delay the outcome and making payment, but the company was still legally obliged to respond.

• Keep detailed records of where all personal information is stored – such as Microsoft, G-Suite, Dropbox

• Be able to say how and where information is being shared, and with whom

• Have a clear retention policy stating how long you keep personal information

• Ensure you have client contracts that also cover data protection www.businesstamer.co.uk

• Make sure personal information is not being shared across messaging apps (WhatsApp, Facebook Messenger etc).

Judith can advise on handling a DSAR, as well as how to collect, store and use data with confidence and in a ay that makes future DSARs easier to respond to.