« Back to Glossary Index
A Subject Access Request is a formal request by an individual to receive all personal data that an organisation holds about them. For fleet operators, this includes any video footage in which the requesting person is identifiable – either as a driver in a dash camera recording, or as a member of the public caught in an incident clip.
Under UK GDPR, organisations must respond to a SAR within 30 calendar days. Fleet operators need a defined process for searching, retrieving, and redacting footage in response to a SAR.
- Who can submit – any individual whose personal data you hold: drivers, passengers, members of the public captured in footage
- Response deadline – 30 calendar days; can be extended by 2 months for complex requests with notification
- Footage handling – third parties visible in the footage may need to be redacted before sharing
- Retention policy – footage already deleted under your retention policy cannot be provided; document your policy clearly
- Cost – SARs must be fulfilled free of charge in most cases