SAR request

[fourstardan]

I have just read this article in the Beeb about a Woman who got fired and seeked a SAR for emails about herself https://www.bbc.co.uk/news/uk-england-hampshire-59...

This got me thinking, could I do a SAR against an Employee for obtaining information about whom has given my manager 360 evidence used in peformance reviews that I never know is from?

[williamp]

Possibly. You have a right to know what they have about you, but the DPO will balance this with the persons right to privacy. You might find you only get facts, and no opinions

[fourstardan]

williamp said:

Possibly. You have a right to know what they have about you, but the DPO will balance this with the persons right to privacy. You might find you only get facts, and no opinions

Its interesting, I never realised you could get information this way.

[rog007]

fourstardan said:

…could I do a SAR against an Employee for obtaining information about whom has given my manager 360 evidence used in peformance reviews that I never know is from?

I know you probably didn’t mean it as such, but it’s not ‘against’ anyone; you’re simply exercising your legal right to see what information is being held about you.

As touched on above, there are some exemptions.

More here: https://ico.org.uk/for-organisations/guide-to-data...

[fourstardan]

rog007 said:

I know you probably didn’t mean it as such, but it’s not ‘against’ anyone; you’re simply exercising your legal right to see what information is being held about you.

As touched on above, there are some exemptions.

More here: https://ico.org.uk/for-organisations/guide-to-data...

I didn't say anything was against me....it's the fact a manager anonymises information about me that could be non factual.

[hyphen]

fourstardan said:

..
This got me thinking, could I do a SAR against an Employee for obtaining information about whom has given my manager 360 evidence used in peformance reviews that I never know is from?

Chances are that they will provide the comments but also redact the name and any identifying sections, being generous in the application of the redactions. As they know you probably won't be bothered enough won't fight them in court for more.

So you will get:

Comments From: XXXXXXX XXXXXXX
Comment: fourstardan is useless. When he came in my address at XXXXXXXX XXXXXXX XXXXXXX he failed to carry out task XXXXXXXXXXXX.

[agent006]

It sounds like you would be better off looking into this from an HR point of view, rather than data protection. You have a grievance with either your manager or a malicious colleague by the sound of things. Your employer should have a written policy or procedure for dealing with grievances such as this. I would hesitate to go 'off piste' until you've followed HR policy to the letter.

If you go down the SAR route, it's not some secret back door to easy information, it is an enormous amount of work for the DPO to complile when it is about an employee and a lot of your colleagues will know about it, as they will be approached for information for it. Even with the greatest goodwill in the world it will not help your career prospects.