Skip to main content
Home
The ICO exists to empower you through information.
Search
Search
Search
Menu
Home
For the public
For organisations
Make a complaint
Action we've taken
About the ICO
For organisations
UK GDPR guidance and resources
Subject access requests (also known as SARs or right of access)
Subject access request self serve
Subject access request self serve
Start again
1. What is your question about?
Exemptions and special cases
Change this answer
2. What is your question?
Is there an exemption for requests from employees or ex-employees involved in a grievance or tribunal?
Is there an exemption for requests for emails or other communication between me and my legal advisor?
Can I refuse a request if the information contains information about a third party?
Should I share information that has details about staff?
Should I share conversations between staff members on email or other electronic message (including voicemail) about the person who made the SAR?
Can I share third party information without consent?
Should I share CCTV footage or audio recordings when more than one person can be seen or heard?
Continue
Back to top