Is your firm ready for a data subject access request?
Anyone can ask your firm for a copy of the personal data you hold about them, including relevant email correspondence and you generally have one month to respond, completely. Most AEC firms have never tested whether they actually could.
This guide is built for the people who'd have to answer that request tomorrow, Directors, IT Managers, Project Managers and BIM Managers. If a DSAR landing on your desk today would mean a manual search against a deadline rather than a routine response, this is for you.
What you'll gain
The four things a defensible DSAR response actually rests on
Why AEC firms are more exposed than they think, even when fully compliant on the document side
What this request means for you specifically, whether you're the Director, the IT Manager or the PM whose project correspondence gets pulled in
What closing this gap looks like without building a different process for every request