HR Hub

An updated guide to handling subject access requests has been included in our Knowledge section.

Our guide has been updated in light of revised guidance published by the Information Commissioner (ICO) in May 2023.

According to the ICO, between April 2022 and March 2023, nearly 16,000 complaints related to SARs were reported to it. Where an organisation has failed to comply with a SAR, the ICO can take action by issuing a warning, reprimand, enforcement notice or penalty notice. The ICO’s updated guidance has clarified some common misconceptions, and included some helpful case examples, concerning SARs but it does not materially change the approach organisations should take to responding to the SARs they receive.