Subject Access Request

[ImStillMe]

If I do a Subject Access Request, who does the searching? I T or any individuals named?

Depends what you're asking for. Your personnel file is likely to be HR. Things like appraisal or 121 records might be your line manager. It will vary between organisations though. You could try speaking to the data controller if you're concerned?

In our company the request would be managed by the data protection officer and they would ask the relevant departments/managers (whoever holds the data) to collate the requested info, check it, and send it to the requester. However we’ve had requests which have been treated differently, for example a member of staff asked for copies of emails between two other members of staff, and a copy of investigation paperwork and this was agreed to be sensitive enough that only the HR manager was privy to the contents. The DPO advised the HR manager on how to deal with the request at each stage but they didn’t see the information themselves. It will depend on your organisation, you could call the DPO or the Caldicott guardian to ask before you submit the request.

IT can be asked to search by the DPO.