This 'Subject Access Requests' training includes cross-sector Scottish examples, with particular attention to the interaction between SARs and FOISA requests, complex organisational records, third-party information, mixed personal data, multi-agency information sharing and ICO enforcement relevant to Scottish organisations.
Particular attention is given to the more challenging SARs organisations encounter, including requests involving large volumes of information, multiple systems, third parties, potentially sensitive material and difficult searches. The emphasis throughout is on practical decision-making, proportionate searches, redaction and documenting the reasoning behind disclosure decisions.
All of our live, instructor-led training programmes are developed specifically for professionals working within Scotland's legal and regulatory framework. Every programme is grounded in relevant Scottish legislation, regulatory guidance, practical case studies and real-world scenarios to ensure participants can apply their learning immediately. All are delivered with a practical understanding of the balance between risk and available resources.
Attendance at this training is limited to 30 participants.
Participants will receive a comprehensive course handbook before the training, providing a useful reference guide to support learning during the course and afterwards.
This course is one of a number of specialist training courses in Scotland’s Information Governance Training Academy, with courses repeated throughout the year.
VIEW FULL TRAINING ACADEMY PROGRAMME
Professional development and training records
This course provides structured professional development, and organisations can determine how participation in the training should be recorded within their own professional development and training programmes. Participants will receive a certificate of completion for their training records.
Those responsible for supporting or completing SAR responses:
DPOs and information governance professionals
SAR handlers and coordinators
HR teams
Service managers and casework teams
Administrators involved in locating or preparing records
Director
RiSiO Solutions Ltd
Rachel Mitchell is an award-winning information governance specialist based in Dundee with over 25 years’ practical experience across data protection, records management and Microsoft 365 governance in all sectors.
Rachel Mitchell
Director
RiSiO Solutions Ltd
Rachel Mitchell is an experienced information governance professional with over 20 years' experience helping organisations manage information effectively, meet regulatory obligations and improve transparency, accountability and decision-making.
As Director of RiSiO Solutions Ltd, Rachel works with public, private and third sector organisations across Scotland and the UK, providing specialist advice on information governance, records management, data protection, freedom of information and Microsoft 365 governance. Her clients include local authorities, NHS bodies, charities, care providers, research organisations and national public bodies.
Rachel is recognised for her practical and proportionate approach, helping organisations translate complex regulatory and governance requirements into solutions that support operational delivery. She has extensive experience leading governance reviews, developing information management frameworks, improving records management maturity, and supporting organisations through digital transformation and change.
A respected trainer and conference speaker, Rachel is known for delivering engaging, practical learning based on real-world experience. Her focus is on helping delegates build confidence, understand risks and obligations, and apply good information governance practices in their day-to-day roles.
Rachel holds an MSc in Information and Records Management and is an Associate Member of the Information and Records Management Society (IRMS), where she also serves on the IRMS Scotland Committee.
Rachel Mitchell is an award-winning information governance specialist based in Dundee with over 25 years’ practical experience across data protection, records management and Microsoft 365 governance in all sectors.
In partnership with: RiSiO Solutions
RiSiO Solutions Ltd is a Scotland-based information governance consultancy specialising in records management, data protection, freedom of information, Microsoft 365 governance, and information and data strategy.
Working across the public, private and third sectors, RiSiO helps organisations develop practical, proportionate approaches to managing information, meeting compliance obligations, and supporting effective decision-making.
Known for its engaging and pragmatic training style, RiSiO delivers learning that translates governance principles into real-world practice.
