A fast, economical and secure way to respond to employee DSARs in the UK, in accordance with data protection laws.
The General Data Protection Regulation (GDPR) grants an individual the right to make a data subject access request (DSAR) in order to find out what data is being processed about them and to correct it if it is wrong. However, DSARs are now being used increasingly by employees and their advisers to support a grievance, in response to a disciplinary or performance improvement process, or to support a tribunal claim. Just because an employee is not actually interested in how their data is being processed, is not a reason to refuse to deal with a DSAR.
Our blog series on DSARs is also available to view online.
What Does This Mean for Employers?
Employers are typically receiving an increasing number of employee DSARs. Responding to these types of request can be an extremely time-consuming – and in some cases, a complex – exercise. An employee can ask their employer to provide them with a copy of all of their personal data processed about them, which could include emails, documents, call recordings, CCTV footage and so on.
- Time – In some cases, thousands of emails and records must be reviewed to assess whether they can be disclosed. This can take up considerable time and management resources, particularly in assessing whether the third party data contained in them should be disclosed.
- Expense and internal resources – Specialist software enables efficient processing but requires significant financial outlay, as well as implementation time.
- Legal position – Employers will need legal advice to help red flag issues relating to third party personal data, commercially sensitive data, data that is subject to legal privilege and on issues relating to a tribunal claim.
Employers generally have only one month to respond to a DSAR, including providing the employee with a copy of their data. If the employer fails to do so, it may trigger a complaint to the Information Commissioner’s Office (ICO), asserting a breach of data protection laws. This in turn, could lead to unwanted attention from the ICO, including an investigation and possible enforcement action, including fines.
DSAResolution substantially reduces the time, expense and resource burden of responding to your employee DSARs so you can focus on your core business operations. DSAResolution enables you to respond to your employee DSARs quickly and effectively, ensuring you comply with data protection laws.
- Technology – We have built a bespoke technology platform so you do not have to spend a fortune overhauling your systems or implementing costly document review platforms.
- Value – We achieve significant economies in the high volume sift of documents, which enables cost savings.
- Legal expertise – You will benefit from specialist legal support from our team of data privacy and employment law experts, who will help you to identify and advise you on any issues of concern connected to a litigation, HR or data protection matter before the ICO.
We offer a competitive fixed fee structure that is transparent and enables you to have certainty of cost.