IAPP UK Intensive 2026: Privacy | AI governance | Cybersecurity law

LONDON

23-26 February

Back to conference agenda

Complex DSARs in Practice - A Roundtable Discussion

Wednesday, 25 Feb.

14:15 - 15:15 GMT

Intermediate level

BREAKOUT SESSIONPRIVACYCUSTOMER TRUST AND EXPECTATIONSEMPLOYMENT AND HRLAW AND REGULATIONPROGRAM MANAGEMENTSTRATEGY AND GOVERNANCE

DSARs have grown in volume and increasingly become a weaponized tool in the context of disputes. This panel brings together practitioners with distinct vantage points: a DPO who managed 2,000 requests in a single day during a general election, a privacy manager navigating high-profile media DSARs, an employment and data protection lawyer who has been handling DSARs since the 1998 Data Protection Act, and a legal tech founder tracking emerging patterns across thousands of requests.

We will explore the practical questions facing privacy professionals: When is it appropriate to invoke "unfounded or excessive?" How are extension rules working in practice? What happens when data subjects bypass regulators for the courts? And how do you coordinate responses across multiple controllers?

What you will learn:

  • Practical strategies for pushing back on problematic DSARs while managing regulatory risk.
  • How recent Data Use and Access Act changes affect your response timelines and processes.
  • Approaches for handling multi-controller DSARs and complex organizational structures.

Sponsored by: Phaselaw

Moderator and speakers

headshot of Josh Schwartz

Josh Schwartz

CEO and Cofounder

Phaselaw

headshot of Ann Bevitt

Ann Bevitt

Partner

Cooley

headshot of James Robson

James Robson

Former Labour Party DPO

headshot of Louise Wright

Louise Wright

Data Privacy Manager

BBC Studios