Share on LinkedInShare on LinkedIn

ARTICLE · 17 DECEMBER 2025

Be Ready For Requests To Access Your Company's Data

Burness Paull LLP
Burness Paull LLP
Contributor
Burness Paull LLP

Burness Paull LLP

Proudly based in Scotland, Burness Paull is a full-service, independent law firm working with...

View firm profile
Explore more from Burness Paull LLP

For public authorities, and some private sector entities operating within the public sector or performing certain functions, have the additional burden of being subject to Freedom of Information legislation.

United KingdomPrivacy

Businesses have become data repositories. It is unavoidable. All organisations - public, private and third sector - build up vast amounts of information, commercial, organisational and personal. It is crucial that business managers understand the significant obligations in terms of data protection and privacy, as well as heightened risks of cyber threat.

Increasingly, organisations in all sectors are having to contend with more regular and complex statutory information requests for personal data of their employees or other individuals (data subject access requests or "DSARs").

For public authorities, and some private sector entities operating within the public sector or performing certain functions, have the additional burden of being subject to Freedom of Information legislation. Those bodies should have a full understanding of what information they hold and ensure robust processes are in place to respond to what are often broad requests for information. The

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.

See more popular content from