Subject access requests (SARs) - new guidance

New guidance for employers on responding to subject access requests (SARs) has been published by the Information Commissioner’s Office.

Anyone can request a copy of their personal information from organisations, including where they got their information from, what they’re using it for and who they are sharing it with. Organisations must respond to a SAR within 1 month of receipt of the request (this can be extended by up to 2 months if the SAR is complex). Failure to do so can result in a fine or legal action. The new guidance consists of a series of very useful Q&As.