More of a marathon than a sprint
If you receive a subject access request (SAR), you have a calendar month to respond, compared to the 72-hour report requirement for breaches. The longer deadline contrasts with the amount of information that a SAR may involve. While a breach report may be a dozen pages, for some SARs the response may run into the hundreds.
If you use Sentry, you’re guided through the process just like recording a breach. In particular, Sentry’s notes and attachment facility comes into its’ own for SARs. Any documents you create, including the response, can be uploaded. You must keep a copy of the information you provide to the data subject because they may want to raise questions.
You can enter notes on any tab, while If you want a full chronology, you can get this from the History tab.