Data subject access requests

New and updated

• Type:

  Employment law guide

  Data protection

  Updated to reflect that the Data (Use and Access) Bill was introduced to Parliament on 23 October 2024.

• Type:

  How to

  How to respond to subject access requests from employees under the UK GDPR

  Updated to reflect the ICO's guidance on fees to cover the cost of responding to manifestly unfounded or excessive requests.

• Type:

  Letters and forms

  Letter refusing subject access request or asking for administrative fee

  Updated to flag up ICO guidance on the definition of a manifestly unfounded" or "excessive subject access request.

• Type:

  Letters and forms

  Form for individual to make subject access request

  Updated to take account of verbal subject access requests, which ICO guidance states are valid.

• Type:

  Letters and forms

  Letter responding to subject access request providing requested information

  Updated to take account of verbal subject access requests, which ICO guidance states are valid.

• Type:

  Letters and forms

  Letter responding to subject access request asking for more information

  Updated to take account of verbal subject access requests, which ICO guidance states are valid.

• Type:

  Letters and forms

  Letter extending time to respond to subject access request

  Updated to take account of verbal subject access requests, which ICO guidance states are valid.

• Type:

  FAQs

  What rights of access do employees have to job references?

• Type:

  FAQs

  Where an individual's employment offer is withdrawn due to an unsatisfactory reference do they have any right to see the reference?

• Type:

  FAQs

  If an employee asks for a copy of their "personnel file" is the employer obliged to supply all the information held on the employee?