Sybille Steiner, an employment partner at Irwin Mitchell, offers advice on how employers must comply with the GDPR. She addresses subject access request (SARs), which are often used as leverage in employment disputes. She notes how the GDPR will enhance employees rights to access personal data held by their employers, will entitle them to more detailed information regarding the way in which their data is processed, will reduce the time limits for the employers response, and will abolish a current fee for responding to a SAR. Employers are obliged to comply with a SAR within 40 days of the request, and the GDPR oblige employers to comply faster. Appropriate training and guidance should be in place to ensure that staff can respond to SARs quickly and efficiently.