Data Subject Access Requests Made By Employees
Supporting employees to understand, request and access their personal data, offering clear, practical guidance on making data subject access requests and challenging employer responses and enforcing your data protection rights. Our solicitors can provide you with expert legal advice to review, explain and challenge restrictive covenants, helping you understand your obligations and the enforceability of your restrictions and protect your career options.
Employees are increasingly using Data Subject Access Requests (DSARs) to understand what information their employer holds about them, especially during workplace issues such as grievances, disciplinaries or potential tribunal claims. We help employees prepare effective DSARs and challenge inadequate or delayed employer responses. Whether you need your personal data to support a dispute or simply want clarity on how your employer uses your information, our team provides strategic and tailored advice to ensure your rights under the UK GDPR are properly exercised and protected.
Preparing and Submitting your DSAR
A well‑drafted DSAR can make a significant difference to the completeness of the information you receive. We help you prepare a clear and targeted request that maximises the chances of obtaining the data you need.
Our support includes identifying the personal data most relevant to your concerns, shaping the scope of the request to avoid unnecessary delays, and drafting a DSAR that is comprehensive, accurate and difficult for an employer to dismiss or minimise. We also advise on how your DSAR fits within any ongoing grievance, performance, disciplinary or litigation processes, ensuring your strategy aligns with your wider objectives.
Reviewing Your Employer’s Response
Employers frequently provide responses that are incomplete, heavily redacted, or overly narrow in scope. We can review the disclosure, assessing whether it complies with UK GDPR requirements and whether data has been withheld improperly.
Our review identifies gaps, insufficient searches, unjustified redactions, and documents or categories of data that should have been provided. We help you understand the information disclosed, how it fits into your wider dispute, and what further action, if any, is necessary to obtain missing material. Our approach ensures you are not disadvantaged by an employer’s restrictive interpretation of their obligations.
Challenging delays, refusals or non-compliance
If your employer delays, refuses your request, or provides an inadequate response, we can challenge their position promptly and effectively. This may involve drafting follow‑up correspondence, addressing improper reliance on exemptions, and advising on whether to escalate the matter to the Information Commissioner’s Office (ICO), and providing assistance in doing so. We ensure your rights are taken seriously and support you in enforcing them in a strategic and well‑informed way.
Key Contact
<script>
document.addEventListener('DOMContentLoaded', function () {
const deptEl = document.getElementById('acf-author-department');
const department = deptEl?.dataset?.department;
if (typeof gtag === 'function' && department) {
gtag('set', { author_department: department });
}
});
window.dataLayer = window.dataLayer || [];
const dept = document.getElementById("author-department")?.textContent?.trim();
if (dept) {
window.dataLayer.push({
event: "authorDataReady",
author_department: dept
});
}
</script>Insights
Unlock valuable insights from our articles.
Analysis
Case Study: Streamlining Operations
Learn how we improved efficiency our client
John Doe
24 May 2023
.
5 min read
Analysis
Case Study: Streamlining Operations
Learn how we improved efficiency our client
John Doe
24 May 2023
.
5 min read
Analysis
Case Study: Streamlining Operations
Learn how we improved efficiency our client
John Doe
24 May 2023
.
5 min read
Analysis
Case Study: Streamlining Operations
Learn how we improved efficiency our client
John Doe
24 May 2023
.
5 min read
Analysis
Case Study: Streamlining Operations
Learn how we improved efficiency our client
John Doe
24 May 2023
.
5 min read
Analysis
Case Study: Streamlining Operations
Learn how we improved efficiency our client
John Doe
24 May 2023
.
5 min read
Single-Sex Spaces at Work: What Employers Should Do While Waiting for Further Guidance
There have been recent legal developments and updated government guidance which has confirmed how single-sex spaces, such as changing rooms…
Your employee privacy notice is probably out of date – and 2026 will expose it
From 16 June 2026, employers will face new obligations under the Data (Use and Access) Act 2025 requiring them to…
Data Protection Complaints: New Legal Requirements from June 2026
All organisations acting as data controllers will be required to operate a formal internal process for handling data protection complaints,…
Meet our experts
Dedicated professionals ready to assist you.
Frequently Asked Questions
Find answers to your most pressing questions about our services and processes.
What is a DSAR?
A Data Subject Access Request (DSAR) allows you to obtain copies of the personal data an organisation holds about you, together with information about how that data is being used. It is a right under UK GDPR and can be an important tool in understanding decisions made about you or gathering information relevant to a workplace dispute.
How long does my employer have to respond?
Your employer normally has one month to respond to your request. In situations where the request is particularly complex, they may extend this by up to two additional months, but they must inform you of any extension before the original deadline expires.
Can my employer refuse to deal with my request?
An employer can only refuse a DSAR in specific circumstances, such as where the request is “manifestly unfounded” or “manifestly excessive”. These exceptions are interpreted narrowly, and employers must justify any refusal or restriction. We can advise you if your employer is attempting to rely on an exemption improperly or narrowing the scope of your request unfairly.
What if my employer does not comply?
If your employer fails to respond, provides an incomplete disclosure, or refuses your request without proper justification, you can make a formal complaint to them. If the issue is not resolved, you may escalate your concerns to the ICO. We can help you assess the response, challenge any non‑compliance and prepare correspondence to support your position.