Forum Discussion
Office 365 Subject Access Requests
Wondering what processes other companies follow when they receive a Subject Access Request. In the UK we have 30 days to supply an extract of data when requested against search criteria - although w...
Hi Steve,
Many organisations in the UK use journaling to an archive to achieve this, usually a gateway archive service such as Mimecast, or another third party archive like Global Relay. These just use transport rules and send connectors in EAC to do the journaling. The organisation will upload a copy of their PST's when the archive starts and everything new (internal and external) goes straight in the archive. After that, no more need to worry about PST's as there is a tamper proof compliant copy of all email in the archive which has e-Discovery and where a copy exported as required.
I know this isn't utilising the native Microsoft functionality as Vasil outlined, but its just an observation having worked in cloud in the UK for over 10 years.
Best, Chris
Many organisations in the UK use journaling to an archive to achieve this, usually a gateway archive service such as Mimecast, or another third party archive like Global Relay. These just use transport rules and send connectors in EAC to do the journaling. The organisation will upload a copy of their PST's when the archive starts and everything new (internal and external) goes straight in the archive. After that, no more need to worry about PST's as there is a tamper proof compliant copy of all email in the archive which has e-Discovery and where a copy exported as required.
I know this isn't utilising the native Microsoft functionality as Vasil outlined, but its just an observation having worked in cloud in the UK for over 10 years.
Best, Chris