With the forthcoming GDPR, individuals will have the right to obtain access to any personal information and data that is held on them and processed by an organisation. The compulsory response time for SARs under the GDPR will be reduced, with organisations, including law firms, required to respond to a SAR within one month of receipt.

“Processing subject access requests in that time will inevitably put a strain on law firms’ resources,” said Margaret Warrington, Nalytics’ product manager. “Typically, a law firm might spend anywhere from one to 10 days on a SAR – this can be reduced to a matter of hours using the Nalytics SAR module.”


Define who you are looking for and how they can be recognised. For example:

  • alternative names
  • common misspellings
  • email address
  • ID numbers

Search for all alternatives across specified data.


Exclude exempt data such as:

  • legally privileged information
  • management information
  • opinions
  • confidential references





Censor the data to obscure details that should not be disseminated, such as:

  • third parties
  • sensitive data
  • confidential data




Prepare response output:

  • drag-and-drop content to notes
  • export to Word




Approved suppliers to the Law Society of Scotland, Nalytics legal sector customers will be able to use this new module to manage their own SARs more effectively and efficiently.

Warrington added: “Not only can Nalytics significantly reduce the time spent on finding personally identifiable information (PII) by searching large volumes of data in seconds, it can also redact sensitive information, which potentially could be overlooked in a manual search. Nalytics makes it easier, faster and more cost effective to prepare responses to SARs.”

For more information click here, or contact us today to find out how your law firm can save time, money and resources managing Subject Access Requests.