Specialist DSAR practice
Specialist DSAR Response.Audit-defensible. Affordable.
Our team focuses only on subject access requests and provides a quality and affordable service. Our specialists have been trained by seasoned Data Protection Officers responsible for large privacy functions at multinational, household brands. All our DSAR Agents hold a BCS Certificate in Data Protection and have completed the Information Commission’s Data Protection Essential training. We understand the time and financial cost of dealing with these requests and use our expert knowledge and innovative technology to remove the stress from in-house teams.
AI-generated imageProud partner of
Who we help
Outsourced support when you need it.
We provide as much support as you need — no long-term financial commitments required. We can support with only complicated requests, or provide a full service for all your requests.
AI-generated imagePrivacy teams, DPOs and customer services teams
Hold the line on defensibility without burning out the privacy function. Senior support for high-volume, high-complexity, and edge-case requests.
AI-generated imageHR & People teams
Employee DSARs are the hardest — often grievance-driven, emotional, unwilling to clarify scope, and always urgent. We handle these requests end-to-end so HR & People teams can focus on their key priorities.
AI-generated imagePartners
Refer DSAR fulfilment with confidence, or white-label our practice under your engagement. A defensible, scalable outsourced partner channel for legal and consulting firms. We save your staff time so your staff can focus on their specialist areas of responsibility.
What we do
Two options — complete outsourced fulfilment or advisory service.
Managed DSAR service
DSAR fulfilment
We take the request and return a defensible package within statutory timelines. You retain the relationship with the data subject and the regulator-facing record — we handle the operational support.
Our support:
- Guidance on data searches and scope to reduce volume
- Deduplication, redaction and exemption application
- Response letter and audit-defensible disclosure package
- CCTV, image and audio redaction
DSAR advisory
Advisory service
For teams who want to keep DSARs in-house but need the right process, training and playbooks.
Our support:
- Policy, procedure, and template suite build
- Disclosure decision frameworks and playbooks
- Regulatory engagement support
- Training using case studies
Pricing
A fixed fee per request. Published, capped, no retainer.
A scoping call, a written quote within one working day, and no surprises when the invoice arrives.
Standard request
£1,500 + VAT
Fulfilment of a standard data subject access request (most of the volume we handle), delivered inside the statutory period with a search log, exemptions log and redaction schedule you can defend. You are provided with an outcome letter and ongoing advice after disclosure.
Complex request
From £3,000
Capped at £5,000 + VAT
Quoted after the scoping call, with the cap fixed in writing before we start. You will never be invoiced above the cap, whatever the request turns into.
Fees cover the operational work of fulfilling the request; they do not include legal advice on the merits of a dispute or representing you to the Information Commission — we will tell you at the scoping call if either applies. Retainer arrangements are available for organisations with high volumes of requests.
Why us?
DSAR specialists by design.
Our focus is on providing a quality, quick and affordable service. We solve a headache.
Specialist focus
We have a team that only does DSARs. Our advantage is the innovative use of technology, deep practical experience and the understanding of the importance of audit trails.
Specialist delivery
Every engagement is scoped, overseen and signed off by a senior privacy professional who has led a privacy function at Data Protection Officer or director level.
Technology-enabled
Our use of workflow tooling accelerates intake, scoping, and review. Technology does the heavy lifting, but our privacy specialists apply their deep knowledge on exemptions, scoping and redaction to provide a quality result that is defendable and ready for release.
Audit trail
Every step in the process is logged, creating an audit trail that is clear and defendable.
Process
How we fit into the DSAR process.
| Step | Your role | Our role |
|---|---|---|
| 1 | Receive the request | Analyse the request and advise on the response |
| 2 | Verify the requester’s identity | DSAR folder for uploading raw data |
| 3 | Search your systems | Advise on search terms and scope |
| 4 | Upload search results to our secure UK data location | Remove duplicates, redact, apply exemptions and create the first audit report |
| 5 | Review the first audit report | Adjust and prepare the final disclosure package and outcome letter |
| 6 | Send the DSAR response | Extract audit report if challenge received |
| 7 | Respond to data subject challenges and complaints | Advise on responding to challenges or complaints |
| 8 | Close, store disclosure package and complete Register | Retain data according to the agreed retention period |
At the end of the process you are provided with a disclosure package that gives clear background and context for regulators and any follow-up requests or queries.
DSAR FAQ
Subject access requests: the questions we are asked most.
Straight answers for HR, legal and privacy teams in UK organisations. Each answer names the provision it rests on so you can check it yourself.
- What is a DSAR?
- How long do we have to respond to a DSAR?
- Can we “stop the clock” on a DSAR?
- Can we charge a fee for a DSAR?
- Do we have to release CCTV footage in response to a DSAR?
- What can we withhold from a DSAR response?
- Can a solicitor or claims management company make a DSAR for someone else?
- Do we still have to respond if the person is in a dispute with us?
- What happens if we miss the DSAR deadline?
- What does it cost to have Just DSARS handle a request?
Get in touch
Tell us how we can help.
Contact us to book a scoping call. Our pricing is published — £1,500 + VAT for a standard request, complex requests capped at £5,000 + VAT — so one complicated case can never wipe out your annual budget.
Prefer email? hello@justdsars.com
Just DSARS is a service of VulaPri Limited, contracted and led from the UK. Case delivery is supported by our South African group company, JUST DSARS SA (Pty) Ltd, under group data transfer agreements.