Right to Access Support for UK Organisations
Practical support for organisations responding to an individual’s right of access. Whether you are dealing with your first request, a large document set or a difficult disclosure, Content Capture Services can help you work out the right practical route.
The right of access is commonly referred to as subject access. If you already know you need full SAR support or only the redaction stage, those dedicated services are linked throughout this page.
Right of access, without the confusion
Start with the request you have and the stage you are at. We can explain which CCS service fits the practical work involved.
Practical support around the right of access
Right of access work can involve several different tasks. Depending on the requirement, CCS can support the practical stages around searching, organising, reviewing, redacting and preparing information for secure return.
- Need the whole request managed? Use our SAR Services.
- Already collected the records? Use our SAR Redaction Services.
- Not sure which route fits? Use this page and tell us where you are in the process.
Your organisation remains responsible for legal decisions, exemptions and the final response.
Discuss Your Right of Access Request
Organisations of every size use CCS for sensitive information work
The existing client examples below are retained from this page. Our work spans redaction, subject access, data protection and other information-management projects.
What does the right of access involve?
The ICO describes the right of access, commonly referred to as subject access, as the right to obtain a copy of personal information together with supplementary information. The practical response normally involves recognising the request, locating relevant information, reviewing what can be disclosed and returning the response securely. Read the ICO guidance.
Recognise the request
A person does not need to use a particular phrase or form. A valid request can be made verbally or in writing when it is clear they are asking for their own personal information.
Check identity or authority where needed
You may need to confirm who the requester is, or whether a third party has authority to act for them. Any checks should be reasonable and proportionate.
Search reasonably and proportionately
Current ICO guidance requires a reasonable and proportionate search for the requested information. Large email sets, attachments and duplicated records can make this stage resource intensive.
Prepare a clear and secure response
The information supplied should be understandable and provided securely. Third-party information and other material may need careful review before disclosure.
Choose the right support for your request
Right of access and subject access describe the same underlying individual right, but the practical service you need depends on where you are in the response process.
Use this page when the request has arrived and you want help understanding the practical route, the stages involved or which CCS service best fits the work.
Use the dedicated SAR service when you want broader operational support across the request, including review, organisation, deduplication, redaction and disclosure preparation.
Use the redaction service when you have already identified the disclosure set and mainly need human-reviewed redaction and quality checking to an agreed brief.
Practical support through a right of access response
The exact scope depends on the request and the support you choose. These are practical areas already described across CCS subject access and redaction services.
Search approach and data collection
The existing Right of Access case study on this page shows CCS advising on search approaches before the client supplied a large set of emails, attachments and documents. For broader search and disclosure projects, our eDisclosure service is also available.
Organise, reduce and review
Depending on the agreed scope, CCS can help work through supplied material, remove duplication and identify content that falls outside the agreed request scope.
Redaction and quality checking
Where redaction is part of the agreed work, information can be reviewed and treated consistently before the disclosure is returned. For a prepared disclosure set, use SAR Redaction Services.
Secure handover and return
The existing case study describes data being transferred through the CCS secure encrypted portal, with SharePoint also offered as a client-preferred route, and the completed material returned securely.
A clearer route from request to practical support
Instead of forcing every enquiry into the same service, we start by identifying what your team has already done and what still needs to happen.
Tell us what has arrived
Share what the person has asked for, what information you hold, any important deadline and how far your team has already progressed.
Confirm the stage and workload
We clarify whether you need practical right of access support, broader SAR management, redaction only or another specialist service.
Agree the scope and route
We agree the files, tasks, transfer method, outputs, responsibilities and timing before production work begins.
Complete the agreed work
The team carries out the agreed practical tasks, raises questions where a client decision is needed and returns the agreed output through the chosen route.
Common right of access challenges
These are the kinds of situations already reflected in CCS subject access work and in the case study on this page.
It is your first request
You need a practical starting point and a clear explanation of what information and decisions are needed next.
The data set is too large
Email chains, attachments, shared records and duplicates can make the review workload much larger than expected.
Other people appear in the records
Third-party personal information can require careful consideration before disclosure, with redaction sometimes forming part of the response.
The request includes footage
CCTV and other video need a different redaction workflow from documents, so we route those files to the appropriate specialist service.
The deadline is getting closer
Extra processing capacity can help when internal teams are already committed to day-to-day work.
You need clearer project control
A defined scope, named contact, progress updates and an agreed return route can make a complex request easier to manage.
Example: a large Right of Access request
A client came to CCS after receiving a Right of Access request. The existing case study records the following sequence:
- CCS supplied reference points, security and privacy policies, and a data sharing and processing agreement.
- CCS advised on search approaches and the client’s search returned more than 10,000 emails, attachments and documents.
- The client uploaded the results to the CCS secure encrypted portal, with SharePoint offered as an alternative route.
- After an initial survey, the client received a fixed price and delivery date before approving the work.
- The material was reviewed, duplication and out-of-scope content were removed, redaction was applied, and the completed bundle was returned through the secure portal.
This is one example from the existing page rather than a promise that every project follows exactly the same scope or timing.
Client feedback
“Happy to give a testimonial. I have used Content Capture Services on numerous occasions and never had any issues with them at all. In all fairness, my requests have always been last minute with a short deadline, and they have always been able to deliver! They are a very friendly team and will always be upfront and realistic with time frames, the quotes I’ve received have never changed so we’re aware of the final cost before we enter into a contract with them.”
– EB
Why organisations bring CCS into Right of Access work
Supporting organisations since 1997
CCS has worked with sensitive information and data-led projects since 1997, a fact now used consistently across the site.
UK-based specialist team
CCS describes its current subject access and redaction support as UK-based, with practical experience handling sensitive information and demanding deadlines.
Human review and quality checks
Human review and quality checking are already core features of the dedicated SAR Redaction service.
Clear scoping and communication
Current SAR pages describe defined scoping, named account management, progress updates and agreed delivery plans rather than vague project handoffs.
Key Right of Access response points
These points reflect current ICO guidance. For the full regulatory detail, use the ICO subject access guidance.
How long do organisations normally have to respond?
Current ICO guidance says a SAR should be answered without undue delay and within one month of receipt. The time limit can be extended by up to a further two months where necessary if the request is complex or the person has made a number of requests.
Can clarification pause the response clock?
Yes, where clarification is reasonably required. ICO guidance says the one-month time limit pauses on the day clarification is requested and resumes the day after the clarification is received.
Do we have to search absolutely everything?
You must make a reasonable and proportionate search for the requested information. The organisation should be able to justify its approach if some searches would be unreasonable or disproportionate.
What if the records contain information about other people?
Third-party information needs careful consideration. Depending on the circumstances, information about other people may need to be withheld or redacted before disclosure. The controller remains responsible for those decisions.
How should the information be returned?
The ICO says the response should be clear, accessible and provided securely. If the request was made electronically, the information should normally be supplied in a commonly used electronic format unless the person requests otherwise.
Right of Access Support FAQs
What is the right of access?
The right of access gives people the right to obtain a copy of their personal information together with supplementary information about how it is used. The ICO commonly refers to this as subject access.
Is a Right of Access request the same as a Subject Access Request?
In practice, yes. A Subject Access Request, usually shortened to SAR, is a request made by or on behalf of a person for information they are entitled to ask for under the right of access. This page uses the Right of Access terminology, while our SAR Services page covers broader managed support.
Can CCS manage the whole subject access request?
Yes. That wider service is intentionally covered on our SAR Services page, which is designed for organisations that need support across the request rather than redaction alone.
What if we only need the redaction stage?
If your team has already identified the records for disclosure and mainly needs the material reviewed, masked and quality checked to an agreed brief, use our SAR Redaction Services.
Can you help with large email and document sets?
The existing case study on this page describes a request involving more than 10,000 emails, attachments and documents. CCS also provides eDisclosure support for larger search, filtering and electronic disclosure requirements.
What if the request includes CCTV or other video?
Footage needs a different workflow from document redaction. For fixed surveillance footage, see CCTV Redaction. For body-worn, interview, mobile, dashcam or other video, use Video Redaction.
Can CCS make the legal decision about what should be withheld?
Your organisation remains responsible for the legal basis, exemptions and final disclosure decisions. CCS can support the practical review and processing work within the scope you approve. If an existing DPO or privacy team needs additional capacity around individual rights work, see DPO Support Services.
What should we include when asking for a quote?
Tell us what has been requested, the stage you are at, the approximate volume and file types, any deadline, and whether you need the full request managed or a specific task such as redaction. If the scope is not clear yet, send what you know and we can identify the most suitable route.
Discuss your Right of Access request
Tell us what has arrived and where you are in the process. We can help you identify whether you need Right of Access support, full SAR services, redaction only or another specialist route.
Call or Email
Talk through the request with the CCS team and we can help you identify the most relevant service.
01663 746604
Book a Call Back
Tell us when works for you and we will get in touch. Your number is used only to arrange the requested call.
Get a Quote
Share the stage, volume, file types and deadline where known. We can still help if the scope is not fully defined yet.