Providing SAR results digitally

[sidewinder]

We recently received a SAR - the data collection, collation and redaction has all been done but now I'm not sure of the best way to provide this data to the individual? They have requested it digitally.

 

I imagine email (the files are too big anyway) is a no-no so do we need some sort of secure document portal that only they can access? I've looked all over and I can't find any detail about the recommended way to do this, it's all very vague.

 

Can anyone recommend a service? We don't mind paying. Unfortunately everything I've found so far is just 'Book a demo!' - we need it a bit more urgently than that - preferably something I can sign up for there and then.

[Steve21]

Can’t you just password zip it up and provide a link from your website for them? (Assuming you have some kind of website to host that is)

 

If it’s a one off job anyway

 

Steve

[smurfomatic]

How big are we talking here? You could sign up for a Gmail account (assuming you don't have G Suite at school already), upload the files to Drive and only share them with the requester's email address.

[sidewinder]

Not huge (<100mb), and yes we have G Suite. Just wasn't sure if that was an acceptable way of sharing this data? That or uploading to our website would both be easier than signing up for something for what is hopefully a rare occurrence.

[Ditto]

Encrypted USB, recorded delivery. Send encryption key by a second secure mechanism. I once got recorded telephone records from a major bank. They sent a CD and separately posted an encryption key. This would remove any worries about the data being available on the web, even if secured.

[Steve21]

Not huge (<100mb), and yes we have G Suite. Just wasn't sure if that was an acceptable way of sharing this data? That or uploading to our website would both be easier than signing up for something for what is hopefully a rare occurrence.

 

In my mind as long as it's protected in some way, a link to downloading it is no more risky than posting/sending something by paper etc.

 

Make it a stupid path to download (when we do something like that the folders we name it (webserver wise) are like myschool.co.uk/eirjerijiaerjaer/download.zip etc, then it's not like a random person would find it without the link during the 1 day download period, and even if they did find it they need passwords to decrypt etc

 

Or gsuite/onedrive etc as people mentioned, same principle. Just not giving it to a random website to host imo

 

Steve