Specialist DSAR response.
Audit-defensible by design.
We only focus on subject access requests and provide a quality and affordable service. Our specialists are trained by Data Protection Officers overseeing data privacy functions at multinational, household brands. We understand the time and financial cost of dealing with these requests and use technology and expert knowledge to take away the stress from in-house teams.
Outsourced support when you need it.
We provide as much support as you need — no long-term financial commitments required. We can support with only complicated requests or provide a full service for all your requests.
Privacy teams, DPOs and customer services teams
Hold the line on defensibility without burning out the privacy function. Senior support for high-volume, high-complexity, and edge-case requests.
For privacy & legal leadsHR & People teams
Employee DSARs are the hardest — often grievance-driven, emotional, unwilling to clarify scope, and urgent. We handle them end-to-end so HR & People teams can focus on their key priorities.
For HR & People leadersPartners
Refer DSAR fulfilment with confidence, or white-label our practice under your engagement. A defensible, scalable partner channel for law and consulting firms that don't want to spend on in-house, permanent staff.
For partners & referrersTwo options — complete outsourced fulfilment or advisory service.
End-to-end DSAR fulfilment
We take the request and return a defensible response within statutory timelines. You retain the relationship with the data subject and the regulator-facing record — we handle the operational lift.
Our support:
- Receipt, identity verification, and scope confirmation
- Deduplication, redaction and exemption application
- Response letter and audit-defensible record bundle
Advisory service
For teams who want to keep DSARs in-house but need the right process, training and playbooks.
Our support:
- Policy, procedure, and template suite build
- Disclosure decision frameworks and playbooks
- Regulatory engagement support
- Training using case studies
A fixed fee per request. Published, capped, no retainer.
A free scoping call, a written quote within one working day, and no surprises when the invoice arrives.
£1,500 + VAT
End-to-end fulfilment of a standard subject access request, delivered inside the statutory month with a search log, exemptions log and redaction schedule you can defend.
A request is standard when it is:
- One data subject, one organisation, one structured or single-system search
- Up to 500 items after de-duplication; documents only — no CCTV, audio or image media
- No live litigation or grievance behind the request
- No special-category or criminal-offence data at volume, and no substantive exemption analysis beyond routine third-party redaction
From £3,000, capped at £5,000 + VAT
Quoted after the scoping call, with the cap fixed in writing before we start. You will never be invoiced above the cap, whatever the request turns into.
A request is complex when any of these applies:
- Litigation, grievance or disciplinary context
- CCTV, audio or image redaction
- Multi-system or unstructured search, or more than 500 items
- Special-category or criminal-offence data at volume, or substantive DPA 2018 Schedule 2 exemption analysis
All prices exclude VAT. Fees cover the operational work of fulfilling the request; they do not include legal advice on the merits of a dispute, representing you to the ICO, or requests where system access or exports cannot be provided within five working days of instruction — we will tell you at the scoping call if any of these apply. Volume and retainer arrangements are available for organisations with regular request flow.
Specialist by design — not by default.
Our focus is on providing a quality, quick and affordable service. We solve a headache.
Specialist focus
We only do DSARs. Our advantage is the innovative use of new technology, deep practical experience and the understanding of the importance of audit trails.
Specialist delivery
Every engagement is scoped, overseen and signed off by a senior privacy professional — someone who has led a privacy function at Data Protection Officer or director level, with both consulting and in-house experience. Specialists do the work; a senior practitioner owns the outcome.
Technology-enabled
Our use of workflow tooling accelerates intake, scoping, and review. Technology does the heavy lifting but our privacy specialists apply their deep knowledge to provide a quality result that is defendable and ready for release.
Audit trail by default
Every step in the process is logged, creating an audit trail that is clear and defendable.
The DSAR process — end to end.
Log & acknowledge
Confirm identity
All systems
Remove duplicates
Protect third parties
Apply exemptions
Cover letter + sign-off
Secure & on time
At the end of the process you are provided with a response pack that gives clear background and context for regulators and any follow-up requests or queries.
Built by a senior privacy practitioner.
Just DSARS is the dedicated DSAR practice of VulaPri Limited — sister to VulaPri's fractional DPO and privacy advisory practice. Engagements are contracted and led from the UK, with case delivery supported by our South African operations company, JUST DSARS SA (Pty) Ltd, under group data transfer agreements.
Every member of our delivery team holds the BCS Foundation Certificate in Data Protection. Ongoing training is provided by senior Data Protection Officers with multinational experience.
The practice head is Fred Oberholzer, a senior privacy practitioner with consulting and in-house experience across UK GDPR, EU GDPR, and global data protection regimes. Former EMEA Privacy Director and EMEA Group DPO at Canon Europe Ltd. Current IAPP Board Member.
Just DSARS is a trading name of VulaPri Limited, registered in England & Wales, ICO-registered and VAT-registered.
Practice fundamentals
- UK contracting entity — VulaPri Limited, England & Wales · Co. 16827529 · ICO registration ZC080376
- Senior-led delivery on every engagement
- UK GDPR, EU GDPR & Data Protection Act 2018 baseline
- Every delivery team member holds the BCS Foundation Certificate in Data Protection
- UK-led delivery, supported by JUST DSARS SA (Pty) Ltd (South Africa)
Tell us what's landing on your desk.
Contact us for a free scoping call. Our pricing is published — £1,500 + VAT for a standard request, complex requests capped at £5,000 + VAT — so one complicated case can never wipe out an annual budget.
Prefer email? hello@justdsars.com