Data protection: Information Commissioner's Office has published a code of practice for subject access requests
The Information Commissioner has published a new code of practice covering how employers should deal with subject access requests (SARs) from employees. It is intended to clarify the procedural aspects of this area of law, following complaints received from both employees and employers.
Under the Data Protection Act 1998 (DPA), employees have the right to: know whether ‘personal data’ about them is being processed by the employer (s. 7[a]); a description of the nature and extent of this processing, including the recipients of it (s. 7[b]); have this information ‘communicated in an intelligible form’ (s. 7[c]); and an explanation of the logic behind any ‘automated decision making’ that uses the personal data (s. 7[d]).
SARs may be made on the basis of these rights. Once received, an employer has 40 days to comply with the SAR, but is not obliged to act (but may act if it wants to) until it has received a £10 fee, evidence to confirm the identity of the employee and any necessary information required to locate the requested information…
If you are registered and logged in to the site, click on the link below to read the rest of the Addleshaw Goddard briefing. If not, please register or sign in with your details below.
Sign in or Register to continue reading this article
It's quick, easy and free!
It takes just 5 minutes to register. Answer a few simple questions and once completed you’ll have instant access.Register now
Why register to The Lawyer
In-depth, expert analysis into the stories behind the headlines from our leading team of journalists.
Identify the major players and business opportunities within a particular region through our series of free, special reports.
Receive your pick of The Lawyer's daily and weekly email newsletters, tailored by practice area, region and job function.
More relevant to you
To continue providing the best analysis, insight and news across the legal market we are collecting some information about who you are, what you do and where you work to improve The Lawyer and make it more relevant to you.
News from Addleshaw Goddard
News from The Lawyer
Briefings from Addleshaw Goddard
FAQs and action points for companies that have issued bearer shares
Data Issues Roundup, 20 April; AT&T's $25m privacy settlement; Facebook case in Austria; Google loses out in Germany; and more
Also, UCAS gives data protection undertaking’.
Analysis from The Lawyer
Which firms are cutting it in this era of slimline rosters, and who are the GC new brooms making clean sweeps? The Lawyer can reveal all
Could Slater & Gordon achieve its stated aim of becoming a top consumer brand by acquiring Pannone?