Request payment for a data subject access request (under the Data Protection Act 1998)

Key points

  • Under the Data Protection Act 1998, employees are entitled to write to their employer asking for details of any personal data held on them.
  • The employer may require a fee to provide this information. This should be no more than the maximum amount specified in the data protection legislation.
  • Where the employer requires payment of such a fee, and an employee submits a data subject access request without enclosing payment, the employer should contact the employee requesting payment and make it clear that the time period for providing the requested information will not start to run until it has received payment.

XpertHR resources