A Subject Access Request (SAR) is a request made by or on behalf of an individual for the information which they are entitled to ask for under Article 15 of the UK GDPR regulated by ICO.

sheepCRM stores its data about a contact/organisation in multiple places within the system albeit the viewing of the information is all in one place, you cannot click a single report to export everything you hold for a particular record.

For example; financial transactions are stored in Payment Reports, as well as within their contact record.

How you wish to share the data with the person making the SAR will inform how you need to find, copy and export it from sheepCRM.

You could choose to export multiple reports already available in sheep CRM and present them as is, or collate these into one document before sharing.

Alternatively/additionally copies of receipts, a spreadsheet of data fields, screen shots of notes etc could also be shared.

Your internal process and policy, or data protection officer should inform all of these decisions.

'Badges' can be a useful way to mark a contact who has made an SAR. You may want to add a badge to the contact as 'SAR' for example so that you have the ability to record dates, filter and export necessary data fields as well as find contacts who have made SAR's in future easily.