Privacy and data protection support
DSAR intake and response
A subject request is a search-and-assembly problem on a statutory clock. We verify, search every system holding the subject's data, apply the exemptions you direct, redact third-party data, and assemble a response pack ready to send.
- Published price
- $300–1,200 / request
- Turnaround
- 48 hours
- Without us
- $2,000–8,000
Fixed per unit, not hourly. No minimum engagement. Quoted before we start.
What you receive
The data subject's records located, compiled and packaged into a compliant response.
- An identity verification record, so the response is defensible on that point
- A system-by-system search log showing what was searched and what was found
- The subject's personal data compiled and de-duplicated across sources
- Exemptions applied as you direct, with the basis recorded per withheld item
- Third-party data redacted, with a redaction log
- A response pack: cover letter, the data, and the statutory information the response must include
What it costs, and what it replaces
Both figures are published ranges for the same unit of work. Ours is fixed before we start; if our process gets faster, that is our gain and your price does not move.
How engagements are structured →- Adnah Legal
- $300–1,200 / request
- Typical cost without us
- $2,000–8,000 / request
Roughly 85% lower at the midpoint of each published range.
How the work runs
01
Verification and clock
We record the identity verification and compute the statutory deadline from the correct trigger date, including any permitted extension and what must be told to the requester to rely on it.
02
Systematic search
Every system in the inventory is searched and logged, including the ones people forget: ticketing systems, shared drives, messaging and backups. The log is what makes the response defensible later.
03
Exemption and redaction
Exemptions are applied as you direct, with the basis recorded per item, and third-party personal data is redacted with a log of every redaction.
04
Pack assembly
The response pack is assembled with the cover letter and the statutorily required information, delivered for your review and sending.
What we need from you
- The request and any correspondence with the requester
- The system inventory, or access to search the relevant systems
- Your exemption policy or instructions on this request
- The receipt date, so the statutory deadline is computed correctly
What we check before delivery
- The search log records every system searched, with the terms used and the date
- Every redaction is logged with its basis, so the response can be defended if challenged
- Exemption application is checked against your instruction, item by item
- The statutory deadline is verified against the receipt date and any permitted extension
When firms send us this
- Requests arriving in volume after a redundancy or a dispute
- Complex requests spanning many systems and long periods
- Organisations without a documented DSAR process to follow
- Requests where an earlier incomplete response has already been challenged
Questions about dsar intake and response
Do you decide which exemptions apply?
No. You decide; we apply your instruction consistently and record the basis per item. Exemption decisions are legal judgments for the engaging attorney or the controller.
Do you need direct access to client systems?
Not necessarily. We can work from exports your client produces, or under read access where they prefer. Either way, access is limited to named individuals under the confidentiality agreement.
Can you handle the whole clock?
Yes, from receipt to response pack. The deadline is computed and tracked, and we tell you early if the volume means an extension should be claimed.
Firms who send us this usually also send
More in Privacy and data protection support
All privacy and data protection support services →This service
Send one and judge the output.
DSAR intake and response at $300–1,200 per request, 48 hours. No minimum, no scoping call, no onboarding cycle.