Skip to main content

Written question asked by Angus MacDonald (Liberal Democrat) on Friday, 29 August 2025, in the House of Commons. It was due for an answer on Tuesday, 2 September 2025. It was answered by Ian Murray (Labour) on Monday, 8 September 2025 on behalf of the Department for Science, Innovation and Technology.


Subject Access Requests

Question

To ask the Secretary of State for Science, Innovation and Technology, what steps his Department is taking to help improve enforcement where employers (a) delay and (b) withhold data in response to subject access requests.

Answer

The ICO can and does take action against organisations, as a result of people’s complaints about their right of access to personal data. Information about the ICO’s enforcement action is available at: https://ico.org.uk/action-weve-taken/.

A requester may also apply for a court order requiring an organisation to comply with a subject access request or to seek compensation. It is a matter for the court to decide, in each particular case, what action to take.

The ICO is currently consulting on changes to how it handles complaints, with a view to improving data protection compliance. The consultation closes on 31 October: https://ico.org.uk/about-the-ico/ico-and-stakeholder-consultations/2025/08/ico-consultation-on-draft-changes-to-how-we-handle-data-protection-complaints/.


Secondary information

Type
Written question
Reference
72237
Session
2024-26
Subjects
Enforcement Subject access requests
Link
View this Written question on www.parliament.uk