Create a bespoke document in minutes, Â or upload and review your own.
Get your first 2 documents free
Your data doesn't train Genie's AI
You keep IP ownership of your information
Subject Access Request Settlement Agreement
"I need a Subject Access Request Settlement Agreement to resolve a dispute with a former employee who claims incomplete response to their SAR from January 2025, including a €5,000 settlement payment and specific commitments about deletion of their personal data within 30 days."
1. Parties: Identifies and defines the Data Controller and Data Subject as parties to the agreement
2. Background: Sets out the context of the SAR, when it was made, any disputes that arose, and the intention to settle
3. Definitions: Defines key terms including 'Personal Data', 'SAR', 'Response', 'Settlement Sum' and other relevant terms
4. SAR Response Confirmation: Confirms the extent and completeness of the data controller's response to the SAR
5. Settlement Terms: Details the settlement sum (if any) and/or other remedial actions agreed upon
6. Data Subject Acknowledgment: Confirmation from the data subject that the SAR response is satisfactory
7. Release and Waiver: Terms under which the data subject releases the data controller from further claims relating to this SAR
8. Confidentiality: Obligations regarding confidentiality of the settlement terms and any disclosed personal data
9. Entire Agreement: Confirms this document represents the entire agreement between the parties regarding the SAR
10. Governing Law: Specifies Irish law as governing law and Irish courts as having jurisdiction
1. Additional Data Processing Consents: Used when the settlement includes agreements about future processing of personal data
2. Employment Provisions: Required when the SAR arose in an employment context and settlement impacts employment terms
3. Future SAR Handling: Include when parties agree specific protocols for handling future SARs
4. Data Deletion Commitments: Used when the settlement includes agreements about deletion of certain personal data
5. Third Party Rights: Required when the settlement impacts rights of third parties whose data may be intermingled
6. Regulatory Notification: Include when parties agree to notify or have notified the Data Protection Commission
7. Cost Allocation: Used when there are specific agreements about bearing costs of SAR compliance
1. Schedule 1 - SAR Details: Details of the original SAR(s) including dates, scope, and specific requests made
2. Schedule 2 - Data Provided: Comprehensive list of personal data provided in response to the SAR
3. Schedule 3 - Redactions: Details of any redactions made and the basis for such redactions
4. Schedule 4 - Outstanding Actions: List of any agreed actions to be taken post-settlement
5. Appendix A - Form of Receipt: Template receipt for the data subject to acknowledge receipt of personal data
6. Appendix B - Data Processing Map: If relevant, mapping of how the data subject's personal data is processed
Authors
Financial Services
Healthcare
Technology
Retail
Education
Professional Services
Insurance
Telecommunications
Public Sector
Manufacturing
Hospitality
Transport and Logistics
Real Estate
Energy and Utilities
Legal
Compliance
Data Protection
Information Security
Human Resources
Risk Management
Information Governance
Records Management
Privacy Office
Corporate Governance
Data Protection Officer
Privacy Manager
Legal Counsel
Compliance Officer
Information Governance Manager
Risk Manager
HR Director
Chief Privacy Officer
Information Security Manager
Records Manager
Company Secretary
Chief Legal Officer
Compliance Manager
Data Protection Specialist
Privacy Analyst
Find the exact document you need
Subject Access Request Settlement Agreement
An Irish law agreement resolving disputes related to GDPR Subject Access Requests, documenting settlement terms between data controllers and data subjects.
Download our whitepaper on the future of AI in Legal
³Ò±ð²Ô¾±±ð’s Security Promise
Genie is the safest place to draft. Here’s how we prioritise your privacy and security.
Your documents are private:
We do not train on your data; ³Ò±ð²Ô¾±±ð’s AI improves independently
All data stored on Genie is private to your organisation
Your documents are protected:
Your documents are protected by ultra-secure 256-bit encryption
Our bank-grade security infrastructure undergoes regular external audits
We are ISO27001 certified, so your data is secure
Organizational security
You retain IP ownership of your documents
You have full control over your data and who gets to see it
Innovation in privacy:
Genie partnered with the Computational Privacy Department at Imperial College London
Together, we ran a £1 million research project on privacy and anonymity in legal contracts
Want to know more?
Visit our for more details and real-time security updates.
Read our Privacy Policy.