Search

How can we help?

Icon

New ICO guidance on DSARs

The UK Information Commissioner’s Office (ICO) released updated guidance in May 2023 focused on how employers should respond to data subject access requests (DSARs) from employees. This new guidance is produced for employers in the format of a Q&A, and gives employers an idea on what to do in certain situations if an employee requests a DSAR.

In this podcast, members of the Data Protection team at Clarkslegal summarise some of the key takeaways from that Q&A including:

  • Settlement agreements
  • Social media platforms
  • Personal email address
  • Redacting unrelated data

If you have any questions at all about any aspect of the DSAR process, or need some advice on how to respond to a DSAR, please contact our Data Protection lawyers for advice.

Meet the speakers

Lucy White

Senior Solicitor

View profile

+44 118 960 4655

Read, listen and watch our latest insights

Pub
  • 15 October 2026
  • Privacy and Data Protection

Data breaches and ICO investigations: Responding with confidence

In this podcast Harry Berryman and Zahra Navarro discuss recent ICO enforcement action, common causes of data breaches, and the practical steps organisations should take to respond effectively when incidents occur.

art
  • 23 September 2026
  • Corporate and M&A

GDPR Privacy Policies: Key requirements for organisations

When an organisation is creating a website or app to reach users or potential customers drafting a Privacy Policy may be an afterthought. However, failure to write a Privacy Policy, which complies with the relevant legislation, can have serious consequences.

art
  • 11 September 2026
  • Privacy and Data Protection

Data Protection Breaches – Personal Liability for Employees

It is well known that employers have obligations under the Data Protection Act 2018 (the “Act”) but, perhaps lesser known, is that employees can be held personally liable for certain actions amounting to criminal offences under the Act.

art
  • 06 August 2026
  • Privacy and Data Protection

The rise of the AI-powered individual: Is your business ready?

Artificial intelligence is changing the data protection landscape, but perhaps not in the way many organisations expected. Much of the discussion has centred on businesses adopting AI and ensuring they comply with the UK GDPR.

art
  • 20 July 2026
  • Privacy and Data Protection

Personal Data FAQs

Explore comprehensive answers to frequently asked questions about personal data, GDPR compliance, and your rights.

art
  • 08 July 2026
  • Privacy and Data Protection

ICO prosecutes employee under the Data Protection Act for forwarding client data to his personal email address

The issue of employees taking confidential business information or personal data when moving to a new employer remains a significant concern for businesses.