# DSAR response approval checklist

Free editable template from Privacy Requests. Complete it against the exact response and files proposed for delivery. It supports human review and is not a guarantee of completeness or legal compliance.

## Blank working copy

### Request and scope

- [ ] The response addresses the scope approved for case: __________
- [ ] Identity or authority checks are complete and documented.
- [ ] Applicable requirements, exceptions and response wording were reviewed by authorized people.
- [ ] Known search limitations and unresolved issues are addressed in the decision record.

### Response message

- [ ] Names, case references and contact details are correct.
- [ ] The message accurately describes the work performed and materials provided.
- [ ] The message does not promise or imply results the evidence cannot support.
- [ ] Any next step or contact route is clear.

### Files and data

- [ ] Every proposed file was opened and inspected, rather than approved by file name alone.
- [ ] The packet contains only the intended files and current versions.
- [ ] Redactions and exclusions were reviewed according to the approved procedure.
- [ ] Third-party information and hidden data, comments, file properties and spreadsheet tabs were checked.
- [ ] Malware and file-safety checks required by the organization are complete.

### Delivery

- [ ] Intended recipient and approved contact channel: __________
- [ ] Delivery method: __________
- [ ] Expiry and access controls: __________
- [ ] Passcode or separate authentication step, if required: __________
- [ ] Revocation owner and procedure: __________
- [ ] Ordinary email attachments are not being used for sensitive exports unless explicitly approved.

### Approval record

- [ ] Final response reference: __________
- [ ] Exact attachment or packet manifest: __________
- [ ] Approved by: __________
- [ ] Approval date and time: __________
- [ ] Conditions or rationale: __________
- [ ] Delivery event and receipt record will be retained in the case record.

---

## Clearly labelled synthetic sample

This fictional example shows a partial review. It is not a customer case, legal assurance or proof of compliance.

- [x] Case: `DEMO-1042`
- [x] Fictional response message reviewed by `Avery Chen`
- [x] Three fictional files opened and inspected
- [ ] Final approval pending the archived support-attachment search
- [ ] Delivery controls not yet approved
- Outcome: `Do not deliver yet; Sam Rivera owns the remaining fictional search task.`
