Booking options
£36 - £48
+ VAT

£36 - £48
+ VATDelivered Online
45 minutes
All levels
This course provides a practical, step-by-step guide to handling Subject Access Requests (SARs) and requests for erasure under UK GDPR, with a particular focus on the issues that commonly arise in legal practice.
The session explains what constitutes a valid SAR or erasure request, the statutory time limits, and how to respond lawfully while protecting legal professional privilege, confidentiality, and third-party rights. It will explore common problem areas for small firms, including requests made by former clients, opposing parties, employees, or individuals involved in contentious or emotionally charged matters.
Participants will learn how to scope and manage requests proportionately, apply exemptions correctly, document decisions, and communicate clearly with requesters. The course also covers how SARs intersect with complaints, litigation, and regulatory scrutiny, and how poor handling can escalate risk unnecessarily.
Partners, directors, and owners of law firms
Compliance Officers for Legal Practice (COLPs) and Compliance Officers for Finance and Administration (COFAs)
Practice managers and office managers
Solicitors, fee earners, and administrative staff involved in handling client data
This course is particularly relevant for firms with limited in-house data protection expertise.
A copy of the course notes and slides will be provided to all delegates which may be useful for ongoing reference.
Please note a recording of the course will not be made available.
Matthew Howgate, Consultant, DG Legal
Matt is a non-practising solicitor who has considerable experience in regulatory issues and advising on complex issues of compliance and ethics. He is also an expert in data protection, UK GDPR and on the civil legal aid scheme.
Matthew is a lead trainer on and co-developed the LAPG Certificate in Practice Management (a training programme for legal managers and law firm owners) as well as regularly providing training on legal aid Supervision, costs maximisation, data protection and security and on general SRA compliance.
Yes, prior to the event a link will be sent to the email address used to register for the course so please ensure the delegate details are correct.
You may also wish to save the domain @system.cademy.io as a safe sender to avoid emails containing access details and handouts from being diverted to junk/spam folders.
No, a recording will not be made available.
No, recording the training session is not allowed. If you attempt to record the session or are found to be recording the event, you may be removed from the session and you will not be eligible for a refund.
For our Premier Training courses, please email us at teamadmin@dglegal.co.uk after the event if you require a certificate of attendance.
The slides will be distributed by email after the event.
You may also wish to save the domain @system.cademy.io as a safe sender to avoid emails containing access details and handouts from being diverted to junk/spam folders.
Yes and these will be distributed by email after the event.
You may also wish to save the domain @system.cademy.io as a safe sender to avoid emails containing access details and handouts from being diverted to junk/spam folders.
The majority of delegates should choose the General Delegate rate.
A discount is available for delegates attending from firms with a current retainer contract with DG Legal i.e. firms that are paying a monthly or annual subscription for our Retainer Service (please contact us by emailing admin@dglegal.co.uk for confirmation of eligibility). If you choose the Retainer Delegate option and are not eligible, you are still bound to pay the full rate and will be invoiced accordingly.
