Under GDPR, individuals have the right to a copy of the personal data that your organisation holds about them – often known as a subject access request. The ICO recently issued new guidance for businesses and employers about how to deal with SARs.
Home right of access