Podcast: Responding to subject access requests
The right to know who holds data about you and how it is being processed has long been a fundamental part of data protection law. The GDPR has brought in a renewed focus on transparency, and employers need to be prepared to respond quickly, should an employee or job applicant make a data subject access request.
We discuss the main changes in the procedure for responding to a subject access request under the GDPR regime and the practicalities of providing access to what could potentially be a large amount of data. We also highlight the resources on XpertHR that can help employers comply with their obligations.
(Since this podcast was recorded, the ICO has issued guidance on when a request may be manifestly unfounded or excessive. For further information see How to respond to subject access requests from employees under the General Data Protection Regulation (GDPR)).
Presenter Laura Merrylees is joined by Susie Munro. Edited and produced by Colin Miller.
