.png)
EMPLOYMENT LAW — DATA SUBJECT ACCESS REQUEST (DSAR)
Your employer holds data
about you. You have
the right to see all of it.
A Data Subject Access Request (DSAR) is one of the most powerful tools available to anyone in an employment dispute. Used correctly, it reveals what has been said about you, when, and by whom. What people find is almost always more significant than they expected.
TIMING A DSAR CORRECTLY IS PART OF THE STRATEGY
Data that exists today may be legitimately deleted tomorrow in the ordinary course of business. If you have been dismissed, the employment tribunal window is three months minus one day from your effective date of termination. The earlier a DSAR is submitted in a dispute, the more likely it is to capture the full picture. If you are unsure whether now is the right moment, the consultation will help you decide.
Most people in a dispute are working with half the picture. A DSAR gives you the other half.
When something goes wrong at work, the conversations that matter most are usually the ones you are not in. The message a manager sends to HR after a difficult meeting. The note made on your file following a performance review. The email chain between senior leaders discussing how to handle your grievance. The occupational health referral note that was never shared with you. These are the documents that shape decisions about your employment, and under UK GDPR you are legally entitled to receive them.
A Data Subject Access Request, or DSAR, is the mechanism by which you exercise that right. It requires your employer to locate and provide all personal data they hold about you: emails in which you are named or discussed, HR notes and records, performance documentation, internal communications between managers, and any other data that relates to you as an identifiable individual. The employer has 30 days to respond. They cannot simply decline. And what they provide, or conspicuously fail to provide, tells a story.
The practical value of a well-scoped DSAR in an employment dispute is difficult to overstate. We have seen DSAR responses reveal discriminatory manager communications made before a dismissal that the employer had described as performance-based. Internal emails confirming a decision was made before the disciplinary hearing took place. HR notes that contradict what was said at a grievance meeting. Occupational health records that were never disclosed but that would have changed the employer's obligations entirely.
The DSAR is not just a tool for gathering evidence. It is also a signal. A correctly drafted, formally submitted data subject access request tells the other side that you understand your rights, that you are prepared to use them, and that you intend to approach the dispute professionally and thoroughly. That signal changes the tenor of what follows.
There are two stages to using a DSAR effectively. The first is drafting and submitting a request that is scoped correctly for your specific matter. A poorly scoped DSAR gives the employer room to interpret it narrowly and return less than they should. A well-scoped request is clear, comprehensive, and leaves no legitimate basis for a reduced disclosure.
The second stage is equally important and frequently overlooked. When the employer's response arrives, typically a large volume of documents, interpreting it requires legal and strategic knowledge. What has been provided is only part of the picture. What has been withheld, redacted, or conspicuously absent, is often where the most significant information lies. Our response review identifies both, documents the findings, and tells you clearly what the disclosure means for your matter and what you should do next.
"The moment a client reads the emails their manager sent about them before the grievance was even raised is the moment the power dynamic shifts. Not just in their own perception. In the employer's, too, the moment they realise what has been disclosed."
WHY SAFEGUARD LEGAL
This service is right for some situations and not for others.
THIS IS RIGHT FOR YOU IF
You are in an active employment dispute, whether at grievance, disciplinary, or appeal stage
You have been dismissed and want to understand what your employer holds before deciding your next steps
You suspect discrimination, victimisation, or that a decision was made before any formal process began
You want to understand the full picture of what your employer has documented about you
You have already received a DSAR response and need help understanding what it contains and what is missing
You want a fixed cost with no surprises
THIS IS NOT RIGHT FOR YOU IF
You need regulated legal advice on whether to bring an employment tribunal claim
Your matter involves a parallel criminal investigation where data disclosure may have evidential implications
You need representation before the ICO or in tribunal proceedings relating to a data protection breach
You require a DSAR directed at an organisation other than a current or former employer
WE CAN HELP WITH
DSAR situations we work with regularly.
01
DSAR during an active grievance or disciplinary process
Sending a DSAR while a grievance or disciplinary process is ongoing can surface communications that directly affect your position in that process. We scope the request to maximise the relevance of what is returned and time it so the response arrives at the most strategically useful moment.
04
DSAR in discrimination cases
Where you believe you have been treated less favourably because of a protected characteristic, a DSAR can reveal the communications that preceded decisions about your employment: promotion, progression, performance management, and dismissal. Comparator data and internal scoring records are particularly useful in these cases.
02
DSAR following dismissal
Post-dismissal is one of the most common and most valuable moments to submit a DSAR. The response frequently reveals whether the decision was genuinely performance-based or whether communications between decision-makers tell a different story. With the tribunal window running, timing matters.
05
Response review where a DSAR has already been submitted
If you have already submitted a DSAR yourself and received a response, we can review and analyse what has been provided. We identify what is significant, flag what appears to be missing or improperly withheld, and provide a written summary of what the disclosure means for your matter and what your options are.
03
DSAR in whistleblowing matters
Where the process itself was flawed, whether through inadequate investigation, failure to share evidence in advance, denial of a companion, or a hearing that appeared predetermined, procedural unfairness is one of the most commonly upheld appeal grounds and can succeed even where the underlying allegation has some foundation.
06
Challenging an inadequate or delayed response
If your employer has failed to respond within 30 days, provided an obviously incomplete disclosure, or relied on exemptions they cannot properly justify, we help you draft a formal challenge. An ICO complaint is a credible and often effective lever, and a properly drafted challenge letter frequently produces a more complete response without the need to escalate.
HOW IT WORKS
Four steps. No uncertainty.
01
Get your fixed price
Answer a short set of questions about your situation. The calculator gives you an exact fee before you pay anything. Not a range. Not an estimate. Please check your appeal deadline before you proceed.
02
Consultation and Drafting
Pay and book your consultation. We scope the request carefully to your specific matter, draft the DSAR, and provide full submission guidance. If you have opted for the response review only, send us your existing disclosure and we begin from there.
03
Employer Responds
Your employer normally has one calendar month to respond to a Subject Access Request. If they request an extension, seek clarification, or fail to respond, depending on the service selected, we will advise you on the appropriate next steps where you have instructed the two-stage service or a response review.
04
Findings and next steps
We review the full disclosure, identify what is significant, flag what is absent or improperly withheld, and deliver a written summary of findings and recommended next steps. This step applies to the response review and complete service options.
Why Safeguard Legal
We know what to look for because we know how these disputes are built.
Built inside regulated practice
Our work is grounded in 17 years of experience across regulated law firms including direct casework, compliance responsibility, and senior practice management. We know how employment documents are assessed because we have worked inside the environments that assess them.
Law Society accredited
Our principal holds Law Society accreditation in Employment Law and Family Law. Micro-credentials that are independently verified credentials, not self-assessed. This is the standard against which our work is calibrated.
Fixed fee, not hourly
You know the cost before you commit. There are no hourly billing surprises, no revision fees, and no ambiguity. The fee is calculated on the specifics of your case and agreed upfront.
"We secured a six-figure settlement for a whistleblowing client through strategic use of a DSAR against a global law firm. The disclosure revealed what no voluntary process had. That is what this tool can do, used correctly."
FREQUENTLY ASKED QUESTIONS
Questions people ask before booking
What must an employer include in a DSAR response?
Your employer must provide all personal data they hold about you, which in an employment context means emails in which you are named or discussed, HR records and meeting notes, performance documentation, appraisal records, occupational health referrals and reports, disciplinary and grievance correspondence, and any other documentation in which you are identifiable as an individual. The obligation extends to data held on any system or platform, including workplace messaging tools such as Slack or Microsoft Teams. The employer may redact data relating to third parties who have not consented to disclosure and may withhold documents subject to legal professional privilege, but they must explain what has been withheld and why.
How long does an employer have to respond to a DSAR?
Under UK GDPR, an employer has one calendar month from the date they receive the request to provide their response. They may request a two-month extension in cases of particular complexity, but they must notify you of the extension within the initial one-month period and explain why it is needed. Failure to respond within the statutory timeframe is a breach of UK GDPR and can be reported to the Information Commissioner's Office.
Can my employer refuse a DSAR?
An employer cannot refuse a DSAR outright. They may decline to provide certain categories of data where a legitimate exemption applies, and they may redact information relating to identifiable third parties, but they must still respond and must explain what they have withheld and on what basis. A blanket refusal, an unacknowledged request, or a response that is obviously incomplete are all compliance failures. Where an employer fails to respond adequately, a complaint to the ICO is a credible and often effective next step.
Will my employer know I am considering legal action when I send a DSAR?
A DSAR submitted during or following an employment dispute will generally be understood as strategic by the employer. That is not a reason not to send one. It is a signal that you understand your rights and are prepared to use them, and that signal changes how the other side approaches the matter. You are under no obligation to explain your reasons for making the request.
I already submitted a DSAR myself. Can you still help?
Yes. If you have already submitted a DSAR and received a response, the response review is available as a standalone instruction. We review and analyse the disclosure, identify what is significant, flag what appears to be missing or improperly withheld, and provide a written summary of what the disclosure means for your matter and what your options are. Please contact us to confirm the scope before booking.
Can a DSAR help with a discrimination claim?
A DSAR is one of the most useful tools available in a discrimination case. Discrimination rarely leaves an obvious paper trail in the documents that are voluntarily shared. It shows up in the emails between managers before a decision is communicated, in the notes made on a personnel file, and in the scoring records from a promotion process. A well-scoped DSAR directed at the right systems at the right moment captures information that fundamentally changes the evidential picture in a way that voluntary disclosure never does.
Is this service confidential?
Yes. Everything you share with us is held in strict confidence and used only for the purpose of preparing your document. We do not share your information with any third parties. Full details are set out in our Privacy Policy.
What if my situation turns out to be more complex than I thought?
The triage calculator identifies complexity before quoting. If your matter falls outside our standard scope because of volume, complexity, or urgency then you will be told immediately and directed to the appropriate support. If additional complexity emerges during the consultation, we will discuss this with you openly before proceeding.