The Information Commissioner’s Office (ICO) has published new guidance for organisations to help them deal with requests from individuals for their data. Under the Data Protection Act, anyone has the right to find out what information an organisation holds about them by making a subject access request. Once received, an organisation normally has 40 days to reply to the request. During the last financial year the ICO handled over 6,000 complaints related to subject access requests. The new guidance is designed to help organisations handle subject access requests more efficiently, while supporting the public in taking control of their personal information. The ICO has also published ten simple steps which organisations should consider when responding to subject access requests. Employers are often faced with data subject access requests when dealing with grievances and internal disciplinary proceedings, as well as tribunal claims, and the guidance provides very useful information.
This provides summary information and comment on the subject areas covered. Where employment tribunal and appellate court cases are reported, the information does not set out all of the facts, the legal arguments presented and the judgments made in every aspect of the case. Employment law is subject to constant change either by statute or by interpretation by the courts. While every care has been taken in compiling this information, we cannot be held responsible for any errors or omissions. Specialist legal advice must be taken on any legal issues that may arise before embarking upon any formal course of action.
