Request further information to deal with a data subject access request

Key points

  • Under the Data Protection Act 1998, employees are entitled to write to their employer asking for details of any personal data held on them.
  • The employer may reasonably require further information to satisfy itself about the identity of the person making a request and to locate the information being sought.
  • Where the employer reasonably requires such further information, it should contact the employee requesting it and make clear that the time period for providing the requested information will not start to run until it has received the necessary further information.

XpertHR resources