How to respond to subject access requests from employees under the General Data Protection Regulation (GDPR)
Author: Jo Broadbent
Summary
Click on any of the hyperlinks to go to more detailed guidance below.
- Be aware that employees have the right under the GDPR to ask employers for copies of personal data relating to them.
- Ensure that policies and procedures for dealing with subject access requests reflect the requirements of the GDPR.
- Be able to identify a subject access request.
- Understand your obligations to identify who has made the subject access request.
- Take steps to clarify the scope of the subject access request.
- Carry out the searches required to assemble the relevant personal data.
- Respond to the data subject access request appropriately.
- Maintain records of subject access requests.
View the full article today
Register to read this article
Already an XpertHR user?
Log in
