Data protection
27 June 2012
Must we deal with this “subject access request”?
An ex-director has written to the company demanding that it “discloses all personal data held on him”. The board wants to know if this subject access request (SAR) can be legitimately refused. What’s the latest ruling on this point?