New ICO guidance on DSARs

04 July 2023
Privacy and Data Protection

The UK Information Commissioner’s Office (ICO) released updated guidance in May 2023 focused on how employers should respond to data subject access requests (DSARs) from employees. This new guidance is produced for employers in the format of a Q&A, and gives employers an idea on what to do in certain situations if an employee requests a DSAR.

In this podcast, members of the Data Protection team at Clarkslegal summarise some of the key takeaways from that Q&A including:

Settlement agreements
Social media platforms
Personal email address
Redacting unrelated data

If you have any questions at all about any aspect of the DSAR process, or need some advice on how to respond to a DSAR, please contact our Data Protection lawyers for advice.

Subscribe Now

Meet the speakers

Lucy White

Senior Solicitor

View profile

Email Lucy

+44 118 960 4655

About this podcast

Subject

New ICO guidance on DSARs
Author

Lucy White
Expertise

Privacy and Data Protection
Published

04 July 2023

Read, listen and watch our latest insights

06 August 2026
Privacy and Data Protection

The rise of the AI-powered individual: Is your business ready?

Artificial intelligence is changing the data protection landscape, but perhaps not in the way many organisations expected. Much of the discussion has centred on businesses adopting AI and ensuring they comply with the UK GDPR.

20 July 2026
Privacy and Data Protection

Personal Data FAQs

Explore comprehensive answers to frequently asked questions about personal data, GDPR compliance, and your rights.

08 July 2026
Privacy and Data Protection

ICO prosecutes employee under the Data Protection Act for forwarding client data to his personal email address

The issue of employees taking confidential business information or personal data when moving to a new employer remains a significant concern for businesses.

08 June 2026
Privacy and Data Protection

FAQs – Privacy Documentation

Clearly documenting and regularly reviewing data protection policies and procedures is paramount to demonstrating compliance with the UK GDPR. It is essential that such policies are communicated within an entity and staff are regularly trained on these.

19 May 2026
Privacy and Data Protection

New Complaints Procedure for Data Protection Coming in June – Are You Ready?

The Data (Use and Access) Act 2025 (the “Act”) received Royal Assent last year and introduces slight reforms to the UK’s data protection regime.

06 May 2026
Privacy and Data Protection

Use of Personal Devices at Work: Why a Bring Your Own Device Policy is Essential

If you have employees who bring their own devices into the workplace and use said devices to deal with company data, you may want to consider a Bring Your Own Device (“BYOD”) policy.

Contact Lucy

+44 118 960 4655 contact@clarkslegal.com