2025, issue 31
Subject access requests and data shared with defence organisations
An SAR can sometimes involve patient information shared with your defence organisation. Here’s our advice on what to include - and what to redact.
There may be an assumption that under an SAR, there is an obligation on the data controller to provide copies of all the documents that include personal data. That is not correct.