The Information Commissioner has published a Code of Practice on how to deal with subject access requests for personal information from employees and ex-employees under the Data Protection Act 1988.
The Code provides guidance on how to respond to subject access requests, explains how to deal with requests involving other peoples’ information, and gives practical examples of requests and various exemptions.