Since the General Data Protection Regulation (GDPR) legislation was introduced in May 2018, there has been a marked increase in the number of subject access requests from current and former employees. Some of these are being used as a litigation threat by unhappy/aggrieved employees, and there is no doubt that such requests can take up a huge amount of time by managers/employers in finding and collating data.
