In May this year, the ICO published new guidance for employers on responding to subject access requests (SARs).
The new guidance is in the form of Q&A and aims to provide practical information to help employers to comply with SARs, and to answer the most frequently asked questions by organisations when dealing with SARs. Although the guidance does not change the approach to SARs and should be read alongside the general guidance, it offers useful, practical examples in relation to issues often faced when responding to an employee SAR.
The guidance offers insight into specific scenarios, such as when the data subject is copied into an email, dealing with information relating to the data subject on social media channels and the use of CCTV footage amongst others.
You can find the full guidance here.
