Addressing DSARs from Former Employees: A Unique Challenge for HR Teams

Former employee Data Subject Access Requests (DSARs) are becoming more common as individuals exercise their privacy rights, particularly following workplace disputes or departures. Unlike customer requests, these often involve sensitive HR records, emails, performance reviews, and collaboration tools such as Microsoft Teams, making them more complex to manage. 

Many requests are linked to litigation or employment grievances, requiring organisations to search across multiple systems while ensuring all relevant personal data is identified. At the same time, businesses must protect confidential information, including legal advice, third-party personal data, and sensitive internal discussions. 

This is where accurate redactions become essential. Before disclosing documents, organisations should carefully redact information that is exempt from disclosure or relates to other individuals, ensuring compliance without compromising privacy or confidentiality. 

A repeatable HR-specific DSAR workflow—combining HR, Legal, and IT teams with consistent search, review, and redaction processes—helps organisations respond efficiently, remain compliant, and reduce the risk of errors.