New Guidance Issued In The UK Regarding Subject Access Requests

When an employee, or former employee, submits a subject access request ("SAR"), do you know how to respond?

Seemingly, there is much variation in the way such is handled.

A new Code of Practice ("the Code") has just been produced and published by the Information Commissioner's Office which provides the controllers and processors of personal data ("data") with a useful point of reference. It is a comprehensive guide which covers many common scenarios and includes examples in each of its sections.

As well as explaining the rights that employees have in relating to accessing their own data, the Code clarifies what a data controller must do in order to comply with their duties.