Search

How can we help?

Icon

Data Subject Access Request: Advice for Employers

Since the introduction of the EU General Data Protection Regulation (GDPR)  in 2018, employees have had the right to request access to their personal data from their employer using a Data Subject Access Request (DSAR).

In this podcast two members of the Data Protection team at Clarkslegal discuss DSARs in an employment law context, as they often appear where there is on ongoing dispute between an employee and their employer. They will explain what exactly a DSAR is, how one is made, and how companies should respond if they receive one.

If you have any questions at all about any aspect of the DSAR process, or need some advice on how to respond to a DSAR, please contact our Data Protection lawyers for advice.

Read, listen and watch our latest insights

art
  • 26 November 2025
  • Employment

The Data Use and Access Act 2025 – how to handle data protection complaints

This article will focus on, in particular, the requirement for data controllers to ensure that, by June 2026, appropriate complaint procedures are put in place (s 103).

art
  • 12 November 2025
  • Employment

GDPR: Who are data controllers and processors?

Controllers and processors have a different set of responsibilities, and have various responsibilities when dealing with data breaches.

art
  • 23 October 2025
  • Privacy and Data Protection

AI and Data Protection – Is Fair and Transparent Privacy Possible?

We live in a digital world. Every facet of daily life is governed to some degree by phone, web or some form of connected technology.

art
  • 13 October 2025
  • Privacy and Data Protection

AI and Data Protection: key legal developments in 2025 – 2026

The rapid integration of artificial intelligence into the workplace continues to reshape how organisations manage data, recruitment, and decision-making. Alongside this technological shift, UK and international regulators are introducing new legal frameworks designed to balance innovation with accountability.

art
  • 26 September 2025
  • Privacy and Data Protection

PECR – fines, direct marketing and cookies

The Data (Use and Access) Act 2025 received Royal Assent on 19 June 2025 which makes changes to the UK’s data regime, amending the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations 2003.

art
  • 05 September 2025
  • Privacy and Data Protection

When Ignoring a DSAR Becomes a Criminal Offence

On 3 September 2025, Mr Jason Blake appeared at Beverley Magistrates Court and was fined for failing to respond to a data subject access request (DSAR).