Here’s a quick guide on how to respond effectively and stay compliant.
You have one calendar month to respond to a SAR. Start by verifying the identity of the requester (to avoid unauthorised disclosure), then log the date of receipt and start compiling relevant data.
DSARs apply to all formats - emails, call logs, and video footage. If your CCTV system captures individuals in identifiable ways (faces, number plates, uniforms), this falls under personal data.
Before releasing any data, redact third-party personal information to avoid breaching their privacy rights. For CCTV recordings, this means blurring or masking other individuals, vehicle registrations, or sensitive areas. Also consider keypad entry systems, computer screens and confidential documentation that might be visible in the footage.
Failing to redact properly can lead to GDPR violations and potential fines.
Manually redacting video is time-consuming and prone to errors. Our CCTV video masking and redaction service ensures GDPR-compliant redaction of faces, screens, and other identifying features in your footage.
We help businesses, schools, councils, and organisations across the UK respond quickly and securely to SARs involving video evidence. Explore our CCTV Redaction Services for more information.
Once redacted, provide the information in a commonly used format - often a secure digital file or encrypted email. Clearly explain what you’ve included and any exemptions used under GDPR.
For futher information 👉 See the ICO’s official SAR guidance
Handling SARs correctly protects your organisation from legal risk and reinforces public trust. If your request involves CCTV footage, using a trusted video redaction service is not just smart - it’s essential for compliance.
Need help preparing video footage for a Subject Access Request?
Contact Aquarius Creative today for GDPR-compliant CCTV redaction and masking services.
With a background working alongside major agencies and corporate clients, Peter understands the importance of data protection, privacy, and compliance under UK GDPR. His experience in video editing, secure file handling, and digital content management ensures CCTV footage is processed with care, accuracy, and discretion.
Peter regularly works with businesses, organisations, and legal teams requiring CCTV redaction services, ensuring faces, number plates, and identifiable information are properly blurred while maintaining evidential integrity. His approach combines technical precision with a strong awareness of UK data protection responsibilities.