Topics >
Managing employees/workers >
Data protection >
Data subject access requests
Updated to reflect new rules on time limits for responding to data subject access requests, in place from 5 February 2026 under the Data (Use and Access) Act 2025.
Updated to reflect new rules on time limits for responding to data subject access requests, under the Data (Use and Access) Act 2025, in effect from 5 February 2026.
Updated to reflect changes to automated decision-making under the Data (Use and Access) Act 2025.
The Data (Use and Access) Act 2025 introduces a requirement for organisations to have a data protection complaints procedure in place.
Updated to flag up ICO guidance on the definition of a manifestly unfounded" or "excessive subject access request.
Updated to take account of verbal subject access requests, which ICO guidance states are valid.
HR and legal information and guidance relating to data subject access requests.