Extract from LDM Global’s article “DiSARm a Data Subject Access Request (DSAR) in 4 Steps”
Since the introduction of the GDPR on May 25th , 2018, LDM Global has seen a considerable spike in the number of Data Subject Access Requests (DSARs) faced by our clients on a monthly basis.
The scope of a DSAR can be wide-ranging and is often used by either a disgruntled current or former employee, embarking on a contentious litigation process with their current or ex-employer.
If an employer collects, holds and uses personal data belonging to an existing or past employee and the employer falls under the scope of the GDPR, then a response furnishing all personal data in scope must be issued from to the employee within 30 days.