Under the Data Protection Act 1998 individuals have the right to make a subject access request (SAR) to obtain personal information held about them by a data controller. When the original Act was passed in 1984, it is doubtful that one could have foreseen the technological developments that have occurred since. Gone are the days when an employer merely held on file an employee’s home address, payroll details and start date of employment.
Personal information now usually includes the employee’s mobile number, email address, bank details and health information, to name but a few items. In addition, they are likely to be named in seemingly endless chains of emails. As a result, SARs have become increasingly onerous to comply with and often require electronic searches of email systems and back-ups, resulting in both IT and HR teams being needed.
Unfortunately this has led to an increasing number of requests being made by dismissed employees in order to place an onerous task on the employer, or as a ‘fishing’ exercise to try to force disclosure before making a tribunal claim.
However, a recent High Court decision may give employers a new-found optimism that it is possible to challenge a SAR in scenarios when it is obvious that it has been made for vexatious and improper reasons. In Dawson-Damer and Ors v Taylor Wessing and Ors 2015, a group of claimants who were in a dispute with a trustee company based overseas submitted individual SARs to the trustee’s firm of solicitors who were based here in the UK.
They wanted copies of all personal data held by the solicitors relating to them, and when the solicitors declined to comply, they applied to the High Court for an order to require compliance. The court held the requests were made with the improper motive of seeking documents related to the litigation. It reinforced the point that the purpose of a SAR under the DPA is to enable an individual to establish what data is held about them by an organisation; it is not to be improperly used as a way to obtain documents in connection with litigation.
Matthew heads our employment team. He handles the full range of contentious and non-contentious employment law issues for clients. His particular specialisms include complex staff restructurings and employment issues concerning business transfers. Matthew is recommended by independent legal directory Chambers and Partners which describes him as ‘solutions-focused’ and ‘a solid and respected practitioner noted for his technical abilities’. He trained and worked at a City of London law firm.
Disclaimer: All legal information is correct at the time of publication but please be aware that laws may change over time. This article contains general legal information but should not be relied upon as legal advice. Please seek professional legal advice about your specific situation - contact us; we’d be delighted to help.
In November, the government published the draft Employment Rights (Amendment, Revocation and Transitional Provision) Regulations 2023 (the draft regulations), and are due to come into force on 1 January 2024.…
The government today outlined some key financial changes for workers in 2024 as part of this year’s autumn statement. National insurance Firstly, the 12% rate of employee national insurance contributions…
In this free webinar our experienced employment and business immigration lawyers guide you through the process for carrying out right to work checks in your organisation. Along with plenty of…
Our website uses cookies to improve your experience while you navigate through our website. Out of these cookies, the cookies that are categorised as necessary are stored on your browser as they are essential for the working of basic functionalities of the website. We also use third-party cookies that help us analyse and understand how you use our website. These cookies will be stored in your browser only with your consent. You also have the option to opt-out of these cookies but it may affect your browsing experience on our website. You can find our cookie policy here.
Necessary cookies are absolutely essential for our website to function and enable core functionality such as security and accessibility. These cookies do not store any personal information. You can block these cookies by changing your browser settings, but this may affect how the website functions.
Functional cookies help to perform certain functionalities like sharing the content of the website on social media platforms, collect feedbacks, and other third-party features.
Cookie
Duration
Description
__cf_bm
30 minutes
This cookie, set by Cloudflare, is used to support Cloudflare Bot Management.
mgref
1 year
This cookie is set by Eventbrite to deliver content tailored to the end user's interests and improve content creation. It is also used for event-booking purposes.
Performance cookies are used to understand and analyze the key performance indexes of the website which helps in delivering a better user experience for the visitors.
Analytical cookies are used to understand how visitors interact with the website. These cookies help provide information on metrics the number of visitors, bounce rate, traffic source, etc.
Cookie
Duration
Description
_ga
2 years
The _ga cookie, installed by Google Analytics, calculates visitor, session and campaign data and also keeps track of site usage for the site's analytics report. The cookie stores information anonymously and assigns a randomly generated number to recognize unique visitors.
_gat
1 minute
This cookie is installed by Google Universal Analytics to restrain request rate and thus limit the collection of data on high traffic sites.
_gid
1 day
Installed by Google Analytics, _gid cookie stores information on how visitors use a website, while also creating an analytics report of the website's performance. Some of the data that are collected include the number of visitors, their source, and the pages they visit anonymously.
G
1 year
Cookie used to facilitate the translation into the preferred language of the visitor.
vuid
2 years
Vimeo installs this cookie to collect tracking information by setting a unique ID to embed videos to the website.
Advertisement cookies are used to provide visitors with relevant ads and marketing campaigns. These cookies track visitors across websites and collect information to provide customized ads.