Employees are increasingly using Data Subject Access Requests (DSARs) to understand what information their employer holds about them, especially during workplace issues such as grievances, disciplinaries or potential tribunal claims. We help employees prepare effective DSARs and challenge inadequate or delayed employer responses. Whether you need your personal data to support a dispute or simply want clarity on how your employer uses your information, our team provides strategic and tailored advice to ensure your rights under the UK GDPR are properly exercised and protected.
Data Subject Access Requests Made By Employees
A well‑drafted DSAR can make a significant difference to the completeness of the information you receive. We help you prepare a clear and targeted request that maximises the chances of obtaining the data you need.
Our support includes identifying the personal data most relevant to your concerns, shaping the scope of the request to avoid unnecessary delays, and drafting a DSAR that is comprehensive, accurate and difficult for an employer to dismiss or minimise. We also advise on how your DSAR fits within any ongoing grievance, performance, disciplinary or litigation processes, ensuring your strategy aligns with your wider objectives.
Employers frequently provide responses that are incomplete, heavily redacted, or overly narrow in scope. We can review the disclosure, assessing whether it complies with UK GDPR requirements and whether data has been withheld improperly.
Our review identifies gaps, insufficient searches, unjustified redactions, and documents or categories of data that should have been provided. We help you understand the information disclosed, how it fits into your wider dispute, and what further action, if any, is necessary to obtain missing material. Our approach ensures you are not disadvantaged by an employer’s restrictive interpretation of their obligations.
Key contact
Insights
Get valuable insights from our articles.
Frequently Asked Questions
Find answers to your most pressing questions about our services and processes.
A Data Subject Access Request (DSAR) allows you to obtain copies of the personal data an organisation holds about you, together with information about how that data is being used. It is a right under UK GDPR and can be an important tool in understanding decisions made about you or gathering information relevant to a workplace dispute.
Your employer normally has one month to respond to your request. In situations where the request is particularly complex, they may extend this by up to two additional months, but they must inform you of any extension before the original deadline expires.
An employer can only refuse a DSAR in specific circumstances, such as where the request is “manifestly unfounded” or “manifestly excessive”. These exceptions are interpreted narrowly, and employers must justify any refusal or restriction. We can advise you if your employer is attempting to rely on an exemption improperly or narrowing the scope of your request unfairly.
If your employer fails to respond, provides an incomplete disclosure, or refuses your request without proper justification, you can make a formal complaint to them. If the issue is not resolved, you may escalate your concerns to the ICO. We can help you assess the response, challenge any non‑compliance and prepare correspondence to support your position.





