What To Do When You Receive a Subject Access Request (SAR) in the UK

If your organisation processes personal data including CCTV footage, you're legally required to respond to Data Subject Access Requests (DSARs) under the UK General Data Protection Regulation (UK GDPR).