Your employer does not have to provide data for the following types of subject access request:
- Personal data provided arising as part of legal proceedings. For example, advice given to your employer by a lawyer. This would be bound by legal professional privilege and is exempt from release (DPA 2018 Schedule 2, paragraph 19).
Last Updated: [02/07/2022]