Free tool

SAR health check

Six questions about how your organisation handles subject access requests. Answer honestly and you get a score and a short list of what to fix first. Nothing you choose leaves your browser.

Questions

1. How do requests reach the person who handles them?
2. How do you track deadlines?
3. Could you show the ICO what you searched on a case from last year?
4. How do you redact?
5. When you withhold someone else's information, what is recorded?
6. Have you updated your process for the Data (Use and Access) Act 2025 and, in England, STAIRs?