IAPP UK Intensive 2026: Privacy | AI governance | Cybersecurity law
LONDON
23-26 February
Complex DSARs in Practice - A Roundtable Discussion
Wednesday, 25 Feb.
14:15 - 15:15 GMT
Intermediate level
DSARs have grown in volume and increasingly become a weaponized tool in the context of disputes. This panel brings together practitioners with distinct vantage points: a DPO who managed 2,000 requests in a single day during a general election, a privacy manager navigating high-profile media DSARs, an employment and data protection lawyer who has been handling DSARs since the 1998 Data Protection Act, and a legal tech founder tracking emerging patterns across thousands of requests.
We will explore the practical questions facing privacy professionals: When is it appropriate to invoke "unfounded or excessive?" How are extension rules working in practice? What happens when data subjects bypass regulators for the courts? And how do you coordinate responses across multiple controllers?
What you will learn:
- Practical strategies for pushing back on problematic DSARs while managing regulatory risk.
- How recent Data Use and Access Act changes affect your response timelines and processes.
- Approaches for handling multi-controller DSARs and complex organizational structures.
Sponsored by: Phaselaw
Moderator and speakers

Josh Schwartz
CEO and Cofounder
Phaselaw

Ann Bevitt
Partner
Cooley

James Robson
Former Labour Party DPO

Louise Wright
Data Privacy Manager
BBC Studios