Data Subject Access Requests
Regulations affecting employees are changing
We are currently in a time of great change for data protection following the implementation of GDPR and the Data Protection Act 2018 in May 2018.
Under GDPR, individuals have retained the right to make subject access data requests to their employers regarding data held which relates to them. However, now employers only have one month to provide the requested data (previously 40 days). The mandatory £10 fee has also been removed, meaning the volume of such requests may increase.
We support clients to ensure compliance with their obligations, advise on how best to deal with these requests and examine whether they can be declined.
We can advise clients on how long they should retain data for and what policies should be implemented to ensure they are GDPR compliant.