A SAR landing on a London desk is rarely simple. Requests often arrive in the middle of an employment dispute, come through a firm of solicitors, or cover years of email across a group that stores data in more than one country. The one-month deadline is the same as anywhere else in the UK, but the volume and the stakes usually are not.

We work with London organisations entirely remotely. Documents come to us through an encrypted upload, our specialists carry out the review and redaction, and you receive a disclosure pack ready to send — with a redaction schedule explaining every decision.

Dispute-driven SARs and the City

In London's financial and professional services sectors, a SAR is frequently a tactical step in a wider dispute. An employee who has raised a grievance, been dismissed or is negotiating an exit will often use a SAR to see what has been said about them before deciding whether to bring a tribunal claim.

That changes how the response needs to be handled. The request is still valid and must be answered in full, whatever the motive behind it. But every redaction is likely to be scrutinised later by the other side's lawyers, so the reasoning needs to be documented and defensible from the outset.

Where the request comes through solicitors, confirm the firm has authority to act before disclosing anything. Our guide to a SAR received from a solicitor covers what to check.

When data sits outside the UK

Many London employers are part of international groups. HR platforms, email tenancies and document stores may be run by a parent company in the US, the EU or elsewhere. None of that changes the obligation: if your UK entity is the controller, the personal data it holds or controls is in scope, wherever the servers happen to be.

In practice this means coordinating searches across group systems, agreeing access with overseas colleagues, and making sure data moved back for review is transferred lawfully. We scope this at the start, so it doesn't surface in week three.

Borough councils and public bodies

London's 32 borough councils and the City of London Corporation handle a steady flow of SARs, many relating to housing, adult social care and children's services. These records are often decades old, partly on paper and dense with information about family members and professionals — exactly the material where careful third-party redaction matters most.

Sectors we support in London

Financial services

Trading communications, recorded lines and compliance files, where regulatory confidentiality has to be weighed against the requester's rights.

Law firms and chambers

Requests from former staff or clients where legal professional privilege must be identified item by item, not asserted in bulk.

Technology and scale-ups

Data spread across Slack, Teams, Google Workspace and CRM systems, often with no single owner for search.

Public sector

Borough council and health records with heavy third-party content and older paper files.

How we handle your SAR remotely

  1. Tell us about the request — the systems involved, the date range and your deadline. We confirm a fixed fee within 24 hours.
  2. Upload the documents to an encrypted, access-controlled workspace. Nothing is emailed.
  3. Our specialists review every item and redact third-party and exempt information, logging the legal basis for each decision.
  4. You receive a finished disclosure pack, covering letter and redaction schedule, ready to send.

Every case is quoted individually on the size and complexity of your dataset, and the fixed fee is agreed before any work begins.

Received a SAR in London?

Tell us the scope and your deadline, and we'll confirm a fixed fee within 24 hours. No commitment required.

Get Your Free SAR Assessment →or call 01244 261 379

Frequently asked questions

Do you need to be based in London to handle our SAR?

No. The work is done remotely through a secure, encrypted workspace, which is how most London clients prefer it. The deadline and the legal requirements are identical across England.

Can you handle a SAR that is part of an employment dispute?

Yes. Dispute-driven requests are among the most common we see. We answer the request in full, document every redaction in a schedule, and flag anything your legal advisers should see before disclosure.

Our group stores data overseas. Is it still in scope?

If your UK entity is the controller for that personal data, yes — the location of the servers doesn't remove it from scope. We help you identify the relevant group systems at the outset so the search is complete.