Responding to a Data Subject Access Request (DSAR)
FRA supported a client's response to an ex-employee's Data Subject Access Request (DSAR) with a limited time period to respond. FRA applied a DSAR solution to gain a holistic view of more than 900,000 documents, eliminate redundancies; redact confidential information, and deliver a complete and structured response.
A client received a Data Subject Access Request (DSAR) from an ex-employee with a very limited period to respond. The client requested support from FRA to collect and produce data in response to this DSAR. The client had two weeks to respond and knew there would be a lot of data to sift through and as it required the review and potential production of documents from the Human Resources team, there would be a lot of PII within the data-set.
For this request, FRA collected and loaded 11 PSTs into an AI-powered technology that resulted in over 900,000 documents. The data was globally de-duplicated. The team further culled the data by limiting the data source to only emails related to the data subject based on their name as a search term or searching via the sender/recipient/subject metadata fields, and then by identifying domains, senders, and recipients that could be excluded. This reduced the data set to 19,000 documents.
Afterward, the team further culled the data by applying the relevant date range and search terms relating to the individual and issues and identified the data relevant for the following three categories:
- Hiring process
- Performance Evaluation
A sample of the resulting data set was reviewed to ensure the population included documents relevant to the above categories. Afterward, the initial round of terms were revised along with the email recipient fields. The final document count set aside for review was approximately 10,000 documents, of which around 4,000 parent emails were batched for review. The team applied filters to identify PII categories that were to be auto-redacted, including emails, phone numbers, and certain entities, while the team reviewed the documents so that they could verify the machine-identified redactions were appropriately auto-applied.
In the final set, the review team identified 966 documents for production, which were auto-redacted, bates numbered and produced. There were over 24,000 items that were redacted within this data-set falling into the below categories:
- Phone number (UK and US)
- Currency (UK, US, Euros)
- K. Tax ID Number
- US Passport Number
- K. VAT Numbers
- K. National Health Service Number (NHS)
- K. National Insurance Number (NINO)
After the preliminary steps, the team was able to conduct the final document review, burn and export the redacted documents within 4 days. Due to the lack of manual work needed to apply the redactions and culling tactics applied, the team was able to meet the extremely tight deadline.
FRA's Privacy Compliance Webinar
In this 30-minute webinar, FRA’s Head of Legal, Mike Trahar, and leading data and information governance experts, Harsh Sutaria, Chief Innovation Officer at FRA, and Leigh Isaacs, Director of Information Governance at DLA Piper, share their insight and real-world examples on how to successfully navigate DSARs.
In this 30-minute session, you will learn:
- What proactive steps you can take now to prepare for DSARs.
- Practical tips for simplifying the DSAR response process.
- What the regulators are really looking for. Is putting forward a “good faith effort” enough to avoid scrutiny?
Pro Bono Anti-Fraud Training for the IFRC
Members of our forensic accounting and data analytics teams delivered quarterly virtual training sessions for staff in relevant roles across the 192 National Societies of the International Federation of the Red Cross and Red Crescent Societies (IFRC).More info
In December 2022, the Switzerland-based multinational technology company reached a “full and final settlement” of $327 million with several national authorities. A multi-disciplinary, international team of FRA specialists supported the company through their cooperation with the authorities over more than three years, from investigation to settlement to compliance remediation.More info
FRA was engaged by Petrofac and its external counsel to support the company’s plea discussions with the SFO, which had been investigating the company for several years in relation to bribery allegations contrary to the UK Bribery Act.More info
FRA advised Airbus and its counsel from the early stages in designing a robust and forensically based approach to the investigation, customising a data governance strategy alongside compliance risk assessment and remediation support, as well as the eventual fine calculation.More info
NFT Marketplace Controls
As Head of Regulatory Affairs at a well-known gaming company, an FRA partner led the development of AML and Fraud controls to protect the company's Non-Fungible Token (NFT) Marketplace.More info
High Court Claim related to Oil & Gas Services Company
Our client was defending a multi-billion dollar High Court claim in relation to alleged breaches of a long-term logistics contract. FRA was engaged to provide expert witness support and evidence in relation to the calculation of potential damages associated with loss of profits.More info
International Arbitration Related to Commodity Trading
FRA was approached by the plaintiff in a $1.5bn claim in an international commercial arbitration to provide expert reports and witness testimony that proved in the arbitration finding for the plaintiff.More info
APT Group Cryptocurrency Money Laundering
Reacting to cyber attacks by an Advanced Persistent Threat (APT) group on critical US infrastructure, an FRA Director conducted thorough and sophisticated cryptocurrency asset tracing to identify and disrupt the group's activities.More info
A European bank approached FRA to perform an initial evaluation of its exposure related to customers allegedly involved in money laundering activities. This was of concern to the client given the potential regulatory, financial and reputational implications for the bank.More info
Nordic Telecommunications Company
FRA was instructed by Telia Company (market cap: over $17 billion) and its counsel in the UK, US, the Nordics and Holland to provide forensic accounting and eDiscovery consulting services in the investigation of the Scandinavian telecoms company.More info
Cryptocurrency Terrorism Financing
An FRA expert provided critical support to the FBI's Counterterrorism Division, in connection with a multi-agency task force uncovering cryptocurrency terrorist financing. Their efforts led to the most significant US seizure of cryptocurrency to date.More info
Expert Witness to the Quebec Superior Court
FRA provided pro-bono support to a Canadian individual who brought a case to the Quebec Superior Court to challenge the Canadian Criminal Code law that allows police officers to make traffic stops without suspecting any offence being committed.More info
Cryptocurrency Exchange Collapse Due to Fraud
FRA was retained by external Counsel to represent multiple clients under investigation by the Southern District of New York (SDNY) in connection with the downfall of a prominent cryptocurrency exchange.More info
International Not-for-Profit Organization
FRA was approached to provide pro bono support to a not-for-profit organization that had identified potential anomalies in its accounting and banking records.More info
Middle-East Telecommunications Company
FRA was retained to support one of the world’s largest mobile telecommunications companies in an internal investigation which required an eDiscovery review in the context of alleged compliance violations.More info
Multinational Oil and Gas Extraction Company
FRA was retained by counsel to assist a client performing a due diligence exercise in connection with purchasing an oil and gas producer in West Africa.More info
Illicit Online Marketplace
An FRA Director led an investigation into a nefarious online marketplace, applying complex data analysis resulting in the arrest of numerous cybercriminals selling illicit goods and services.More info
International Event and Talent Management Company
An employee of an international talent agency left the company and took with them several high-profile clients to a direct competitor.More info
Cryptocurrency Exchange Collusion
When a new cryptocurrency experienced sudden delisting from multiple exchanges, their Counsel urgently engaged an FRA partner to help investigate potential antitrust or collusive behavior.More info
FRA was engaged to support the monitorship of an Israeli bank and its subsidiaries, who between 2000 and 2011 were found to have wilfully assisted US clients in opening and maintaining undeclared accounts in a foreign country, and concealing offshore assets and income from authorities.More info
Multinational Insurance Firm
FRA was retained by a major European-headquartered insurer (market cap: over $60 billion) involved in a legal dispute with a US client. The US-based litigation required a potentially wide-ranging and costly eDiscovery exercise.More info
Multinational Transport Engineering Company
FRA was retained by US counsel to Alstom (market cap: over $10 billion) to assist with defending a US securities class action suit. The case involved allegations around export credit financing of a division that Alstom had sold to a third party.More info
Class-action Lawsuit challenging Solitary Confinement in US Prisons
FRA was approached by our client, White & Case, to provide pro bono support to the ACLU in their federal class-action lawsuit seeking to end solitary confinement in two Virginia prisons.More info
Holocaust Restitution Claims Administration
FRA was retained separately by Swiss and German authorities to build claims administration systems for hundreds of thousands of holocaust survivors, facilitating the disbursement of hundreds of millions of dollars over five years. These were among firm's first engagements after our founding at the turn of the century.More info
UN Oil for Food Program
As part of a UN investigation into possible corruption in the Iraqi Oil-for-Food program, FRA carried out a forensic accounting review and eDiscovery exercise.More info
Following the imposition of a monitor in a joint resolution by the US Department of Justice (DOJ) and US Securities & Exchange Commission (SEC), Technip retained FRA to review the company’s anti-bribery measures and export control compliance program, provide forensic accounting and eDiscovery services and train the client’s internal audit staff to autonomously conduct future internal reviews.More info