Subject access request under GDPR

A request under Article 15 of GDPR (General Data Protection Regulation) entitling a data subject to copies of his or her personal information. In employment disputes this is a useful tool by which an employee may see confidential information held in his or her personnel file as well as other personal information held by their employer. We advise employers on how best to respond and advise employees on how to use data subject access requests (DSARs) to good effect. They can also be useful in revealing the content of otherwise confidential job references.