Exit Interviews, Performance Reviews & DSAR Compliance.

Key Points 

• Exit interviews and performance reviews often contain personal data that may be requested through a Data Subject Access Request (DSAR).  

• Identify all relevant records, including HR files, emails, meeting notes, and manager feedback.  

• Apply appropriate redactions to remove third-party personal data and protect the privacy of colleagues, managers, or witnesses.  

• Balance transparency with confidentiality by disclosing only the requester’s personal data while applying any relevant legal exemptions.  

• Maintain accurate documentation of review decisions and redactions to demonstrate compliance.  

• Use automated search and redaction tools to reduce manual effort and improve accuracy.  

• Collaborate across HR, Legal, and Compliance teams to ensure consistent handling of DSARs.  

• Respond within statutory deadlines while ensuring the disclosure is complete, secure, and compliant.