Employee Relations Services > DSAR Support for Employers
DSAR Support for Employers -JourneyHR | We create great places to work
Practical People + Culture support for UK employers managing employee data subject access requests.
Received an employee DSAR?
JourneyHR combines practical HR delivery with the employee-relations judgement often needed when a DSAR arrives in the middle of a sensitive workplace issue. As People + Culture specialists, we help employers manage both the data request and the surrounding people process. If you are unsure how wide the request is, where the information sits or how to keep the response moving, we can help you scope, coordinate and manage it.
What is a DSAR?
A data subject access request, commonly called a DSAR or subject access request, is a request from an individual asking to access personal information an organisation holds about them. In an employment context, that can include information held across HR systems, emails, manager notes, performance records, grievance or disciplinary documents, investigation files and internal messaging platforms.
An employee does not need to use the words “DSAR” or “UK GDPR” for the request to be valid. A message asking for “my HR file” or “all emails about me” may still need to be treated as a subject access request. Organisations must respond without undue delay and, in most cases, within one calendar month of receiving the request. The deadline can be extended by up to a further two months where the request is complex or the individual has made a number of requests, but the individual must be told within the initial one-month period and given the reasons for the extension. It is therefore best to act promptly rather than delay, so there is enough time to clarify the scope, gather information and complete a careful review.
Employee DSARs can become complicated quickly
A data subject access request can be only a few lines long, but responding to one can involve a much bigger exercise. An employee may ask for their HR file, emails between managers, Teams or Slack messages, investigation records, performance documents or information created during a grievance, redundancy or difficult exit.
For growing businesses and People teams without a dedicated data-protection resource, the challenge is not simply finding documents that mention somebody's name. It is working out what personal information falls within the request, where it is held, what needs careful review, what may involve other people's information and how the response will be managed within the required timescale..
JourneyHR brings structure to that work while keeping sight of the employment relationship, manager communications and any live HR process around the request.
Why employers ask for support
Some DSARs are relatively contained. Others quickly become time-consuming because information is spread across multiple people, systems and live HR processes. JourneyHR can add practical People + Culture capacity when:
the request is broad or covers a long period of time
several managers or teams hold relevant information
the request arrives during a grievance, disciplinary process, investigation, redundancy or dismissal
emails or documents also contain information about other employees
there is a large volume of material to coordinate and review
the People or HR team is unclear about ownership, deadlines or the search process
the request raises issues that need specialist data-protection or legal input.
How JourneyHR can help
We can support the practical management of an employee DSAR from the point the request is received through to the response process. Our People + Culture support can be scaled to the size and complexity of the request and the capability already available in your internal team.
1.Scope the request
Help interpret what the employee is asking for, identify the likely information sources and agree a reasonable and proportionate search plan.
3.Keep the process moving
Create a clear action plan, allocate responsibilities and help the business work back from the response deadline.
5.Manage the people and employee-relations context
Support the HR and employee-relations issues around the DSAR where it sits alongside a grievance, investigation, disciplinary process, redundancy, dismissal or difficult exit.
2.Support document review
Help structure the practical review of material, flag information that may need closer data-protection or legal consideration and keep the response process organised..
4.Coordinate information gathering
Give the process clear ownership and organise searches across HR systems, email, shared drives, messaging platforms and manager-held records, working with the People team and managers as needed.
6.Bring in specialist input when needed
Where a request raises more complex data-protection or legal questions, we can coordinate specialist input alongside the People work rather than leaving the employer to find it at the last minute.
DSAR support designed around employee relations
Employee DSARs often arise because something else is already happening in the employment relationship. A worker may be challenging a performance decision, raising a grievance, going through an investigation, disputing a redundancy or asking what was said internally after an exit.
That context matters. The DSAR needs to be handled properly as a data request, but the people issue around it may be just as important. JourneyHR helps employers manage both: keeping the DSAR organised while supporting clear, fair and well-documented HR decisions and communications.
If the request sits alongside a grievance, investigation, disciplinary matter, redundancy or dismissal, our Employee Relations Services can provide wider support with the underlying people process.
When should you ask for help?
The best time is usually before the request becomes urgent. If a DSAR is broad, involves several custodians or sits alongside a sensitive employee-relations issue, early support gives the People team more options and reduces the risk of a rushed response.
You may only need help scoping the request and setting up the process. Alternatively, you may want JourneyHR to provide hands-on support throughout. We can work alongside your existing HR, People, legal or data-protection advisers rather than forcing every request into the same model.
The Data (Use and Access) Act 2025 confirms that organisations only need to carry out reasonable and proportionate searches when responding to a DSAR. It also allows the response deadline to pause where clarification is reasonably required, until that clarification is received.
This page reflects the legal position as at 10 September 2026. Regulatory guidance changes. Check the ICO website for the current position before acting.
Frequently asked questions
Can JourneyHR manage the whole DSAR process?
Yes. JourneyHR can provide hands-on support from initial scoping through to coordinating searches, organising material, supporting review and keeping the response plan on track. We also keep sight of any grievance, investigation, redundancy, dismissal or other people issue. Where specialist data-protection or legal advice is needed, we can coordinate that input with your existing advisers.
When is the right time to ask for support?
The earlier JourneyHR is involved, the easier it is to set ownership, map information sources and agree responsibilities. Support is particularly useful when the request is broad, time-sensitive, spread across several systems or managers, or connected to a sensitive employee-relations matter. We can also step in later if an existing process needs structure or extra capacity.
How does DSAR support fit alongside an existing HR or legal team?
We work around the capability you already have. JourneyHR can give an internal People or HR team extra capacity, coordinate practical work between managers and systems, or work alongside legal and data-protection advisers. Our role is to keep the people, process and employee-relations workstreams joined up, with clear responsibilities and no unnecessary duplication.
What happens if the DSAR arrives during a grievance or dismissal?
A DSAR does not replace the need to manage the underlying employment process properly. JourneyHR can keep the data request and employee-relations matter organised as separate but connected workstreams, with clear ownership, fair process and consistent documentation. This is especially useful where decisions are being challenged or managers need practical support with communications.
Can you only support part of the process?
Yes. Support can focus only on the part you need. We can help scope the request, set up the search plan, project-manage information gathering, support the People team with review and employee-relations context, or restore structure to a process already under way. Our involvement can be scaled to the request, your internal capability and the workplace situation.
Received an employee DSAR?
JourneyHR can step in early or support a process already under way, helping you understand the request, organise the response and coordinate the people involved.
Contact Us
Interested in working together? Fill out some info and we will be in touch shortly. We can’t wait to hear from you!
Aliya Vigor-Robertson
Founding Partner
+44 7979 498 455
aliya@journeyhr.com
Sue Shaw
Founding Partner
+44 7939 992 801
sue@journeyhr.com
Location
JourneyHR
Hunter Suite
12–18 Theobalds Road
London WC1X 8PL
Office Hours
Monday–Friday
9am–5.30pm