Responding to subject access requests

The right to know who holds data about you and how it is being processed has long been a fundamental part of data protection law. The GDPR has brought in a renewed focus on transparency, and employers need to be prepared to respond quickly, should an employee or job applicant make a data subject access request. We discuss the main changes in the procedure for responding to a subject access request under the GDPR regime and the practicalities of providing access to what could potentially be a large amount of data. We highight the resources on XpertHR that can help employers comply with their obligations.