Posts from Amberhawk

Data Protection Act 2018 and subject access requests: easier for employers to resist?

The Data Protection Act 2018 (DPA 2018) contains three provisions that allow an employer to resist subject access requests (SARs) from employees. Confidential references become more confidential The Data Protection Act 1998, under the heading “Confidential references given by the data controller“, stated that personal data were exempt from the right of access: “if they … Continue reading Data Protection Act 2018 and subject access requests: easier for employers to resist?