GDPR and Data Protection Advice

Alex Goodman writes every article here. He is a data protection consultant with over ten years of practice across financial services, SaaS, healthcare, and the charity sector.

The topics come from the questions UK businesses ask: how to respond to a subject access request, what to do in the first 72 hours of a data breach, whether you need a named DPO, and how to handle UK GDPR without a full-time compliance team.

The answers are in plain English.

Employee Subject Access Requests: What You Have to Hand Over When Staff Ask for Their Data

by: Alex GoodmanPublished on: 17/09/2026

An employee sends a subject access request in the middle of a grievance, disciplinary or tribunal claim. What you must search, what you can hold back, the 2026 DUAA changes, and the mistake that got a director convicted.

subject access requestemployee SARGDPRemploymentDPOgrievancetribunalData Use and Access Act

Driven by expertise and personalised service, we’re here to guide you towards GDPR compliance every step of the way.

Business

Services

Socials

Documentation

Cookie Policy

Privacy Policy

Website Terms of Use

Alex Goodman is an experienced GDPR consultant and outsourced Data Protection Officer working with UK businesses to improve their DPO and GDPR compliance.