If you are involved in an employment dispute, your personal data can become very important. Emails, HR records, investigation notes, CCTV, performance records, disciplinary documents, grievance files and workplace messages may all affect your position.
Data protection issues often arise when an employee wants to access records, challenge how their employer has used personal data, or understand whether workplace monitoring, surveillance or disclosure of information was lawful.
At Orpen Franks LLP, we advise employees on GDPR, data protection issues in employment disputes, subject access requests, workplace monitoring, employee records, data breaches and employment rights in Ireland.
If you are looking for a data protection employment solicitor in Ireland, we can explain your rights, review your situation and help you decide the best next step.
If you are dealing with a workplace dispute and need advice about GDPR, employee records or personal data, speak to Orpen Franks LLP for clear, confidential advice.
Quick Answer: What Are My Data Protection Rights at Work?
As an employee, you have rights over your personal data. This may include the right to access your data, understand how it is used, ask for inaccurate data to be corrected, object in some situations, and complain if your data has been mishandled.
In an employment dispute, data protection rights can help you obtain important documents and understand how decisions were made.
At Orpen Franks LLP, we can advise on data protection issues connected to employment disputes, including subject access requests, workplace monitoring, data breaches and employee records.
What Are Data Protection Issues in Employment Disputes?
Data protection issues can arise in many workplace disputes.
Examples include:
- An employee seeking access to HR records
- A subject access request during a grievance or disciplinary process
- CCTV or workplace monitoring being used as evidence
- Emails or messages being reviewed by an employer
- Personal data being shared too widely
- Inaccurate records affecting employment decisions
- Medical information being mishandled
- Investigation notes being withheld
- Data breaches involving employee information
- Employer failure to explain how data is used
- Excessive monitoring of remote or hybrid workers
These issues can overlap with unfair dismissal, disciplinary procedures, grievances, discrimination claims, whistleblowing, bullying, harassment and settlement negotiations.
When Should I Speak to a Solicitor About GDPR at Work?
You should consider getting legal advice if:
- You want to make a subject access request.
- Your employer has ignored or delayed a data request.
- You believe records have been withheld.
- Your personal data has been shared inappropriately.
- CCTV or monitoring has been used against you.
- You believe your employer accessed private emails or messages.
- Your medical information has been mishandled.
- Inaccurate records are affecting your job.
- Data protection issues are linked to a grievance or disciplinary process.
- You are preparing a WRC claim.
- You are negotiating a settlement agreement.
- You are unsure what records you are entitled to receive.
Early advice can help you make a focused request and avoid unnecessary delays or disputes.
What Is a Subject Access Request?
A subject access request, often called a SAR or DSAR, is a request made by an individual to access personal data held about them.
In an employment context, a subject access request may be used to seek access to:
- HR files
- Emails referring to you
- Disciplinary records
- Grievance records
- Investigation notes
- Performance records
- Absence records
- Medical or occupational health records
- CCTV footage
- Payroll records
- Internal messages
- Documents about redundancy selection
- Records connected to dismissal or settlement discussions
A subject access request can be useful in an employment dispute, but it should be carefully worded.
Should I Make a Subject Access Request During an Employment Dispute?
A subject access request may help you understand what records your employer holds and how decisions were made.
It can be useful if:
- You believe there are emails about you.
- You want access to investigation documents.
- You suspect unfair treatment.
- You need records for a grievance or appeal.
- You are preparing a WRC claim.
- You believe your employer’s explanation is incomplete.
- You want to check what data is held before settlement discussions.
- You believe inaccurate information is being used against you.
However, a subject access request is not always the best first step. It may delay matters, create tension, or produce large amounts of information that need careful review.
We can advise whether a subject access request is appropriate and help you word it effectively.
What Can I Ask for in a Subject Access Request?
You can ask your employer for personal data held about you.
Depending on the situation, this may include:
- Personal data in your HR file
- Emails and messages mentioning you
- Notes of meetings about you
- Records of complaints or allegations
- Disciplinary and grievance documents
- Redundancy selection records
- Performance management records
- Absence and sick leave records
- CCTV footage involving you
- Payroll and benefits records
- Data about decisions affecting your employment
Your request should be clear and focused. A very broad request may be harder to manage and may not produce useful results quickly.
Can My Employer Refuse to Give Me Documents?
Your employer may not have to provide every document you ask for.
There may be limits or exemptions involving:
- Other people’s personal data
- Legal privilege
- Confidential references
- Management information in certain contexts
- Documents that do not contain your personal data
- Excessive or unfocused requests
- Certain investigation or regulatory issues
However, employers should not simply ignore a valid request or refuse without proper explanation.
If your employer refuses, delays or provides an incomplete response, you may need advice on your options.
Workplace Monitoring, CCTV and Employee Privacy
Workplace monitoring can raise important data protection and privacy issues.
Monitoring may include:
- CCTV
- Email monitoring
- Internet usage monitoring
- Phone monitoring
- GPS tracking
- Productivity software
- Remote working monitoring
- Access card data
- Call recordings
- Vehicle tracking
- Workplace messaging platforms
Employers may be allowed to monitor employees in some circumstances, but monitoring should usually be lawful, necessary, proportionate and transparent.
Employees should generally be told what monitoring is taking place, why it is happening and how the data may be used.
Can My Employer Use CCTV or Monitoring in a Disciplinary Process?
CCTV or monitoring evidence may be used in a disciplinary process in some cases, but the employer’s use of that data should be fair and lawful.
Issues may arise if:
- Employees were not told about the monitoring
- CCTV was used for a different purpose than originally stated
- Monitoring was excessive
- Private information was captured
- Data was kept longer than necessary
- The evidence was shared too widely
- The employee was not given a chance to respond
- The monitoring breached workplace policies
If CCTV, tracking or monitoring evidence is being used against you, it is worth getting advice.
Data Breaches at Work
A workplace data breach may happen where employee personal data is lost, disclosed, accessed or used without proper authorisation.
Examples may include:
- HR documents sent to the wrong person
- Medical information shared with colleagues
- Payroll information disclosed
- Disciplinary details shared inappropriately
- Personal email or phone details misused
- Sensitive grievance information circulated too widely
- Data stored insecurely
- Employee records accessed without a proper reason
If your data has been breached at work, you may be entitled to complain, ask what happened and seek appropriate remedies depending on the circumstances.
Medical Data and Sensitive Employee Information
Medical information and sensitive personal data should be handled carefully.
Issues may arise where:
- Medical certificates are shared unnecessarily
- Occupational health reports are disclosed too widely
- Disability information is mishandled
- Pregnancy-related information is shared improperly
- Mental health information is discussed inappropriately
- Sensitive grievance details are circulated
- Information about protected grounds is misused
These issues may also overlap with discrimination, reasonable accommodation, bullying, harassment or unfair dismissal claims.
Data Protection and Settlement Agreements
Data protection issues may arise during settlement agreement or exit package discussions.
Before signing, you may want to check:
- Whether you need access to records first
- Whether confidentiality clauses are too broad
- Whether personal data will be retained or deleted
- Whether references or announcements are agreed
- Whether inaccurate records should be corrected
- Whether your data protection claims are being waived
- Whether your employer will restrict access to old records
- Whether investigation or disciplinary records will remain on file
At Orpen Franks LLP, we can review settlement agreements and advise how data protection issues may affect your position.
Data Protection and WRC Claims
Data protection issues can be relevant to WRC claims, especially where personal data helps prove what happened.
Data may be relevant in claims involving:
- Unfair dismissal
- Constructive dismissal
- Discrimination
- Harassment
- Bullying complaints
- Disciplinary procedures
- Redundancy selection
- Payment disputes
- Working time issues
- Protected disclosures
- Penalisation
A subject access request may help gather evidence, but WRC deadlines still apply. You should not delay getting employment law advice while waiting for a data request response.
What Happens When Orpen Franks Advises on Data Protection Issues?
1. We listen to what happened
We talk through the employment dispute, the data issue and what outcome you are trying to achieve.
2. We review your documents
We can review your contract, privacy notice, subject access request, employer response, workplace policies, grievance documents, disciplinary records and settlement agreement.
3. We explain your rights
We explain your data protection rights and how they may connect to your employment law position.
4. We advise on strategy
We can advise whether to make a subject access request, narrow a request, challenge a response, raise a grievance, negotiate or prepare a claim.
4. We advise on strategy
We can advise whether to make a subject access request, narrow a request, challenge a response, raise a grievance, negotiate or prepare a claim.
5. We help you respond
We can help prepare correspondence, review employer replies and identify missing or important records.
6. We advise on next steps
Where appropriate, we can advise on complaints, WRC claims, settlement discussions or related employment proceedings.
How Orpen Franks LLP Can Help
At Orpen Franks LLP, we advise employees on GDPR, data protection issues in employment disputes, subject access requests, workplace monitoring, data breaches, employee records, WRC claims and settlement agreements.
We can help with:
- Advising on data protection issues in employment disputes
- Helping prepare or review subject access requests
- Advising on employer responses to data requests
- Advising where records are missing or withheld
- Advising on CCTV, surveillance and workplace monitoring
- Advising where monitoring evidence is used in disciplinary proceedings
- Advising on data breaches involving employee information
- Advising on medical data and sensitive employee information
- Advising on inaccurate HR records
- Advising on data protection issues in settlement agreements
- Advising how data may support a WRC claim
- Advising on related grievances, disciplinary matters or dismissal claims
Our advice is clear, practical and focused on helping you protect your rights, your privacy and your employment position.
Talk to Orpen Franks About GDPR or Data Protection at Work
If you are involved in an employment dispute and need advice about GDPR, subject access requests, workplace monitoring or employee data, we can help.
At Orpen Franks LLP, we can explain your rights, review your documents and advise on the best next step.
Contact Orpen Franks LLP today for clear, confidential advice about data protection issues in employment disputes.
FAQs About GDPR and Data Protection Issues at Work
Yes, especially where the issue is serious, sensitive, involves senior people, or may affect your job, career or reputation.
Yes, if you have been penalised because of a protected disclosure, you may be able to bring a WRC claim.
If your employer ignores your disclosure or fails to deal with it properly, you should keep records and get advice on your next options.
Often employees report internally first, but this depends on the circumstances. External reporting may be appropriate in some cases.
In some cases, confidentiality may be requested, but it can be complex. You should get advice on the practical and legal risks.
Penalisation means being punished or treated badly because you made, or were believed to have made, a protected disclosure.
An employer should not dismiss you because you made a protected disclosure. If this happens, you should get legal advice quickly.
Protected disclosures may involve criminal offences, legal breaches, health and safety risks, environmental damage, misuse of public funds or concealment of wrongdoing.
Whistleblowing is the common term. Protected disclosure is the legal term used for certain protected reports of wrongdoing.
A protected disclosure is a report of certain types of wrongdoing made by a worker in a way that may be protected under Irish law.
