Search

How can we help?

Icon

Failing to comply with a subject access request may impact the fairness of a dismissal

In the recent employment tribunal case of McWilliams v Citibank, the Claimant had been suspended following allegations that she had breached client confidentiality. The Claimant subsequently submitted an extensive subject access request (SAR) to her employer in respect of her disciplinary proceedings, which was refused on the grounds of proportionality. The SAR’s scope was consequently reduced but was again refused.

The Claimant was dismissed for gross misconduct.  In finding the dismissal to be unfair, the employment tribunal commented that the Claimant (being on suspension) had no access to the documents she needed to prepare for the disciplinary proceedings. The employment tribunal considered it unreasonable that the Claimant had only been able to rely on the employer’s investigation.

The employment tribunal considered it unreasonable that the Claimant had only been able to rely on the employer’s investigation.

Although only a non-binding decision from a tribunal, the message for employers is clear.  In addition to the risk of a complaint to the ICO (which in this case, is on-going) an employer who does not respond to a SAR may be faced with an additional hurdle to overcome in the form of procedural unfairness.

Disclaimer

This information is for guidance purposes only and should not be regarded as a substitute for taking legal advice. Please refer to the full General Notices on our website.

Author profile

Monica Atwal

Managing Partner

View profile

+44 118 960 4605

About this article

Read, listen and watch our latest insights

art
  • 29 October 2026
  • Immigration

UK Immigration shake-up: More flexibility for skilled workers, but at what cost?

The UK Government has outlined further changes to its immigration system, with new measures affecting international graduates, sponsored workers, and businesses employing overseas talent.

art
  • 28 October 2026
  • Privacy and Data Protection

Remote working: 5 key data protection risks for employers

Remote working has become more prominent in modern business. While flexible working arrangements can improve productivity and employee wellbeing, they also create new data protection risks. Regardless of the physical location in which work is done, compliance with UK GDPR does not change.

art
  • 27 October 2026
  • Employment

Fire and Rehire update: Key changes delayed

The Government has published two documents giving key updates to the anticipated changes around ‘fire and rehire’ and restricted contractual variations, coming about as a result of the Employment Rights Act 2025 (“ERA 2025”). We now understand that these changes will now be delayed to March, rather than January 2027.

art
  • 26 October 2026
  • Corporate and M&A

Shareholders’ Agreements for Founders and Investors – SHA Series Part 3 of 5

A shareholders’ agreement is arguably one of the most valuable corporate governance agreements (along with articles of association) in any private UK company with more than one shareholder.

art
  • 23 October 2026
  • Litigation and dispute resolution

Section 172 Companies Act 2006: Key lessons from Saxon Woods v Costa

The Supreme Court’s decision in Saxon Woods v Costa UKSC 21 clarifies directors’ duties under Section 172 Companies Act 2006, confirming that good faith requires both honest belief and appropriate conduct.

art
  • 19 October 2026
  • Immigration

Right to Work Checks: Are UK businesses becoming immigration enforcement officers?

The UK’s Right to Work regime has undergone a significant expansion, with changes taking effect from 1 October 2026.