Right, a driver's asked for their medical data under a Subject Access Request. No sweat, DDIR makes this a quick job.
So, a driver's hit you with a Subject Access Request (SAR) under UK GDPR. You've got a month to get them their data, and thankfully, DDIR's got a neat, one-click bundle ready for you. Fire prevention beats fire fighting, and this is about being prepared.
1. First up, head over to Driver Compliance and then hit the Medical tab. 2. Find the driver you need in the list. 3. On their row, you'll see and click the "Export SAR" button. Heads up — this button only shows for medical reviewers, so make sure you've got the right permissions. 4. The system will then whip up a JSON file for you. This bundle includes everything the driver needs: * Their full D4 record. * Every medical assessment, complete with the raw answers. * The full audit trail – so they can see exactly who-viewed-what. This is the one auditors love to see, by the way. 5. Save that file and then, following your own company's SAR procedure, get it over to the driver.
Quick one — the system automatically logs this export action. That means you've got an unshakeable record of when and by whom this SAR was fulfilled. Also, you'll notice the magic-link token hash is deliberately stripped out of the export. That's a credential, not personal data, so it doesn't belong in the bundle.
For the bigger operations out there who might prefer a polished PDF over a JSON file, that's a follow-up feature we're working on. Just ping support, and they'll keep you in the loop.
See? Keeping on top of these requests is a breeze when DDIR handles the heavy lifting.