Since the General Data Protection Regulation (GDPR) came into force, HR teams have been flooded with requests by employees for a copy of the personal data the company holds about them.

This is often done as part of threatened litigation and can be challenging to deal with, not least because the deadline is shorter and HR needs to make a judgment call on how to respond.

The regulator has received a huge volume of complaints about how requests are dealt with, and you don’t want to be the first company to face a fine.

In this episode, we look at:

• The right to refuse a request or extend the deadline;
• How to set the right search parameters; and
• What you can and can’t withhold.

We look at the role of culture, IT and training and how self-serve platforms and automation can help foster an environment of trust and speed up the process.

And we answer questions like: Do you have to use the search terms requested by the employee? And should you search instant messages, texts and WhatsApps?

In our news round-up we look at:

• How much home working is too much, according to a new report?
• Can employers be held vicariously liable for a data breach by a disgruntled employee?
• Is the use of facial recognition technology legal?

Useful links:

ICO consultation

Send us your questions and we'll answer them in a future episode – email [email protected] or tweet us using the hashtag #TLTemploymentpodcast and tag @TLT_Employment

You can find out more about our employment team at tltsolicitors.com/employment

Sign up to receive insights including our A-Z of employment law at tltsolicitors.com/signup

Finally, if you’ve enjoyed listening, please rate us and write a review.