| Key Takeaway | Legal Reference |
|---|---|
| Employees can request access to personal data held by their employer, but employers can refuse if the request is manifestly unfounded or excessive. | Data Protection Act 2018, Article 12 GDPR |
| The French Court of Appeal has clarified that subject access requests must be proportionate and cannot be used as a tool for harassment or disruption. | French Labour Code L1121-1; CJEU precedent |
| UK employers must balance transparency obligations with legitimate business interests when handling subject access requests. | Employment Rights Act 1996 |
| Repeated or vexatious requests can be grounds for refusal, even if individual requests are technically valid. | Data Protection Act 2018 Schedule 2 |
| If your employer refuses your request unfairly, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO). | Data Protection Act 2018 Part 6 |
| This ruling reinforces workers’ rights to information whilst protecting employers from abuse of data access powers. | GDPR Recital 63 |
| Legal advice is essential before making or responding to subject access requests in employment disputes. | Common law duty of care |
Introduction
What exactly are your rights when you ask your employer for access to the personal data they hold about you? The French Court of Appeal has recently handed down a decision that clarifies these rights for workers across Europe, including the UK. If you’re considering making a subject access request as part of an employment dispute, understanding this ruling is crucial. Employment law in Britain protects workers’ rights to information, but those rights aren’t unlimited. The court’s decision confirms that both employees and employers have responsibilities when it comes to data access. This article explains what the ruling means for you as a UK employee and when you might need legal advice.
Understanding Employee Subject Access Rights
Every employee in the UK has the right to request access to personal data held about them by their employer. This comes from the Data Protection Act 2018 and the General Data Protection Regulation (GDPR). Your employer must respond within 30 calendar days of receiving a clear request. The employer cannot charge you a fee for this unless the request is manifestly unfounded or excessive. In practice, this means you can find out what information your employer has recorded about you, including performance notes, emails, disciplinary records, and correspondence. One employee we advised recently discovered that their manager had made misleading notes about their capability, which later proved vital evidence in an unfair dismissal claim. The right exists to ensure transparency and to help workers understand how decisions about them are being made.
When Can Employers Refuse a Subject Access Request?
Not every request must be honoured immediately. The French court ruling clarifies that employers can refuse if the request is manifestly unfounded or excessive. What does “excessive” mean in practice? It can mean making repeated requests in quick succession, submitting requests that are so broad they would require the employer to manually sift through vast amounts of unrelated data, or using the request as a tool for harassment. The threshold is high — the employer must genuinely be able to show that the request is unreasonable, not simply inconvenient. Employment law protects workers from unfair refusals.
If your employer rejects your request without proper justification, you can complain to the Information Commissioner’s Office (ICO) or take legal action. Courts have consistently held that employers cannot use the “excessive” defence simply because they dislike the person making the request. Under the Law Society guidance, legal advisors must ensure workers understand their rights whilst employers balance legitimate interests.
How This Affects Employment Disputes
In employment disputes, subject access requests become particularly important. A worker facing dismissal might request access to all their performance reviews, disciplinary meetings, and communications about redundancy to understand whether the employer has treated them fairly. The French ruling confirms that employers cannot block these requests simply because they’re inconvenient or because they undermine the employer’s position.
However, the ruling also protects employers from abuse. If a worker makes ten identical requests in a week, the employer can refuse. If the request is so vague or broad that responding would require disproportionate resources, the employer has grounds to refuse or ask for clarification. The balance is important: workers have the right to information that affects their employment, but that right must be exercised reasonably. We’ve seen cases where a subject access request revealed crucial evidence of discrimination or unfair treatment, turning the outcome of an employment tribunal claim.
Your Next Steps if You’re Making a Request
Before making a subject access request, be specific about what information you need. Rather than requesting “everything about me,” ask for documents related to a particular period, meeting, or decision. Keep a copy of your request and send it by email to a named contact at your employer so you have proof of sending. If your employer refuses, ask them to explain their refusal in writing.
If the refusal seems unjustified, contact the Information Commissioner’s Office or seek legal advice. We recommend legal guidance if you’re in an active dispute — a solicitor can help you frame your request to avoid “excessive” characterisations whilst ensuring you get the information you need. The cost of legal advice is often far less than the cost of losing an employment claim due to missing evidence. Contact Wolf Law for specialist employment advice.
Frequently Asked Questions
What is a subject access request?
A subject access request is a formal request to your employer to provide all personal data they hold about you. It includes emails, notes, performance records, and any other documents that contain information about you. You must make the request in writing, and your employer has 30 days to respond under the Data Protection Act 2018.
Can my employer charge me for a subject access request?
No, unless the request is manifestly unfounded or excessive. Your employer cannot charge you simply because it’s inconvenient to gather the information. If they claim the request is excessive, they must justify this in writing and provide a reasoned explanation.
What should I do if my employer refuses my request?
Ask them to provide their refusal in writing with reasons. If you believe the refusal is unjustified, you can lodge a complaint with the Information Commissioner’s Office (ICO) free of charge. Alternatively, you can seek legal advice about taking the matter further through employment tribunal.
Can I use subject access requests in an employment tribunal claim?
Yes. Information obtained through a subject access request is often valuable evidence in unfair dismissal, discrimination, or other employment claims. Many tribunal claims succeed because subject access requests reveal what the employer actually knew and when they knew it.
What if my employer delays responding to my request?
If your employer does not respond within 30 days without good reason, this is a breach of data protection law. You can complain to the ICO or, in some cases, claim compensation for breach of your rights under GDPR Article 82.
Can I make multiple subject access requests?
Yes, but if you make repeated requests for the same information in quick succession, your employer may refuse on the grounds that the requests are excessive. Be strategic and specific — one well-crafted request is better than ten vague ones.
Should I get legal advice before making a subject access request?
If you’re in an employment dispute, yes. A solicitor can help you phrase your request to ensure you get the information you need without giving your employer grounds to refuse on procedural grounds. This is especially important if dismissal, redundancy, or discrimination is involved.
What happens if my employer fails to provide the information I request?
If your employer refuses or fails to provide the information without valid reason, you have the right to complain to the ICO within three years. The ICO can investigate and, if they find a breach, can order your employer to provide the information and potentially pay compensation.
This article is intended for informational purposes only and does not constitute legal advice. For specific advice relating to your circumstances, please contact Wolf Law directly to arrange a consultation with one of our qualified solicitors.
