New ICO guidance on DSARs

04 July 2023
Privacy and Data Protection

The UK Information Commissioner’s Office (ICO) released updated guidance in May 2023 focused on how employers should respond to data subject access requests (DSARs) from employees. This new guidance is produced for employers in the format of a Q&A, and gives employers an idea on what to do in certain situations if an employee requests a DSAR.

In this podcast, members of the Data Protection team at Clarkslegal summarise some of the key takeaways from that Q&A including:

Settlement agreements
Social media platforms
Personal email address
Redacting unrelated data

If you have any questions at all about any aspect of the DSAR process, or need some advice on how to respond to a DSAR, please contact our Data Protection lawyers for advice.

Subscribe Now

Meet the speakers

Lucy White

Senior Solicitor

View profile

Email Lucy

+44 118 960 4655

About this podcast

Subject

New ICO guidance on DSARs
Author

Lucy White
Expertise

Privacy and Data Protection
Published

04 July 2023

Read, listen and watch our latest insights

10 December 2025
Privacy and Data Protection

The 12 Data Protection Mistakes of Christmas

As the festive season approaches, it is not just last-minute shopping and office parties that can catch organisations off guard; data protection slip-ups are just as common.

26 November 2025
Employment

The Data Use and Access Act 2025 – how to handle data protection complaints

This article will focus on, in particular, the requirement for data controllers to ensure that, by June 2026, appropriate complaint procedures are put in place (s 103).

12 November 2025
Employment

GDPR: Who are data controllers and processors?

Controllers and processors have a different set of responsibilities, and have various responsibilities when dealing with data breaches.

23 October 2025
Privacy and Data Protection

AI and Data Protection – Is Fair and Transparent Privacy Possible?

We live in a digital world. Every facet of daily life is governed to some degree by phone, web or some form of connected technology.

13 October 2025
Privacy and Data Protection

AI and Data Protection: key legal developments in 2025 – 2026

The rapid integration of artificial intelligence into the workplace continues to reshape how organisations manage data, recruitment, and decision-making. Alongside this technological shift, UK and international regulators are introducing new legal frameworks designed to balance innovation with accountability.

26 September 2025
Privacy and Data Protection

PECR – fines, direct marketing and cookies

The Data (Use and Access) Act 2025 received Royal Assent on 19 June 2025 which makes changes to the UK’s data regime, amending the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations 2003.

Contact Lucy

+44 118 960 4655 contact@clarkslegal.com