If an employee files a “subject access request” – an email, fax or letter asking for their personal data – their employer will have 30 days to collate a cache of all the information stored about that person. This includes any email that refers to the worker, as well as performance reviews, job interviews, payroll records, absence records, disciplinary records, computer access logs, CCTV footage, and recordings of phone calls to, from or about the person.
[theguardian.com...]