1. Create a new request
Click New Request from the Request Dashboard or from the application menu in the top left of your window.
Enter the details of the Subject that has requested information from your organisation
Click Create SAR to confirm and add it to the Dashboard
The subject will receive an email with a webform link to confirm their details and sign a declaration
2. Acknowledge the Request
The acknowledgement stage of the Request process allows you to wait for the Subject to confirm their details and sign the declaration before you proceed with their request.
The Subject will receive an email with the link to the form once you have created the request. You can see whether the Subject has visited the link or submitted their confirmation on the status bar.
When the Subject has confirmed their details and signed the declaration, they will be displayed. Click Acknowledge to progress to the next stage.
3. Identification Check
To ensure the person making a request is who they say they are, SAR Tracker contains an ID verification step.
If the Subject is known to your organisation, toggle the button to Yes.
To send an ID Request email, toggle the relevant button to Yes and click Send ID Request.
The subject will receive an email with a link to a secure page for uploading their ID verification.
Once the subject has submitted their ID, it will appear on the ID Check page for you to verify.
- Confirm ID Check to move to the next stage
- Add a reason / explanation for not validating the subject's ID and click Reject ID to send an email requesting the subject to upload again
4. Rights Check
If the subject has passed the acknowledgement and ID verification stages, now confirm whether they are legally entitled to a Request from your organisation.
Toggle the button to Yes or end the request if the subject is not entitled.
Click Confirm Rights to proceed.
5. Attach data to the Request
If your organisation holds data relevant to the subject, toggle the button to Yes
The option to Attach a box now becomes available
Assuming you have already analysed and redacted the subject's data in Smartbox.ai, click Attach a box, select the one that contains the subject's data and click Import. If you have not yet processed the subject's data, return to Smartbox home and do so now.
6. Disclose the data
After importing the relevant data, it is now ready to send to the subject.
Check if the files listed are correct and, if you need to make any changes, you can return to the previous step.
When ready, click 'Send Data' to send an email to the subject with a link to a secure page. From this page the subject can download a ZIP file containing the documents that you have shared with them.
The subject will also be given the choice to request you keep or delete the data that was disclosed. Their answer will be shown on the Completion page.
N.B. if the subject requests that their data is deleted, this is not performed by Smartbox. You must manually remove the data from Smartbox and other systems yourself.