Back
Effective 1 June, we have a new address: 34 Imperial Square, Cheltenham, Gloucestershire GL50 1QZ
Get in Touch Menu

Data subject access requests

26 November 2015

Under the Data Protection Act 1998 individuals have the right to make a subject access request (SAR) to obtain personal information held about them by a data controller. When the original Act was passed in 1984, it is doubtful that one could have foreseen the technological developments that have occurred since. Gone are the days when an employer merely held on file an employee’s home address, payroll details and start date of employment.

Personal information now usually includes the employee’s mobile number, email address, bank details and health information, to name but a few items. In addition, they are likely to be named in seemingly endless chains of emails. As a result, SARs have become increasingly onerous to comply with and often require electronic searches of email systems and back-ups, resulting in both IT and HR teams being needed.

Unfortunately this has led to an increasing number of requests being made by dismissed employees in order to place an onerous task on the employer, or as a ‘fishing’ exercise to try to force disclosure before making a tribunal claim.

However, a recent High Court decision may give employers a new-found optimism that it is possible to challenge a SAR in scenarios when it is obvious that it has been made for vexatious and improper reasons. In Dawson-Damer and Ors v Taylor Wessing and Ors 2015, a group of claimants who were in a dispute with a trustee company based overseas submitted individual SARs to the trustee’s firm of solicitors who were based here in the UK.

They wanted copies of all personal data held by the solicitors relating to them, and when the solicitors declined to comply, they applied to the High Court for an order to require compliance. The court held the requests were made with the improper motive of seeking documents related to the litigation. It reinforced the point that the purpose of a SAR under the DPA is to enable an individual to establish what data is held about them by an organisation; it is not to be improperly used as a way to obtain documents in connection with litigation.

Matthew heads our employment team. He handles the full range of contentious and non-contentious employment law issues for clients. His particular specialisms include complex staff restructurings and employment issues concerning business transfers. Matthew is recommended by independent legal directory Chambers and Partners which describes him as ‘solutions-focused’ and ‘a solid and respected practitioner noted for his technical abilities’. He trained and worked at a City of London law firm.

We're here to help
Contact
Matthew Clayton MA LLM (Cantab), CIPP/E
Partner
View profile
Mathew Clayton
Related services
Share this article
Resources to help

Related articles

Major Supreme Court ruling finds paid holiday for part-year workers cannot be pro-rated

Employment & business immigration

On 20 July 2022, the Supreme Court upheld the Court of Appeal’s earlier decision in Harpur Trust v Brazel that part-year workers should not have their paid holiday pro-rated. Here,…

Matthew Clayton MA LLM (Cantab), CIPP/E
Partner

“It’s too hot to work” - or is it?

Employment & business immigration

If this is the cry you are hearing from your staff during the current heatwave, you may be interested to know that although health and safety laws say that working…

Matthew Clayton MA LLM (Cantab), CIPP/E
Partner

Webinar: Working with the menopause

Employment & business immigration

With growing attention around the impact of perimenopause and menopause on employees our employment lawyers look at the potential impacts for your organisation and explore how best to support your…

Willans
Solicitors
Contact us