Data Protection and responding to Data Subject Access Requests

Employers have many obligations under the Data Protection Act 1998 in relation to how they process personal information lawfully.

Data can be found in databases, manual filing systems, word processing programmes, emails, CCTV records, telephone records, internet logs, payroll systems and many more sources.

It is important for employers and employees in charge of data processing to be aware of the obligations, as breaches of certain rules may give rise to criminal sanctions. It is advisable to have a policy in place in respect of both your and your employee’s data protection obligations.