The exemption from disclosure for confidential employment references….
The General Data Protection Regulation (GDPR) and the Data Protection Act 2018 (DPA), which implemented many of its provisions, are now over a year old. The aim of the GDPR was to increase the protection of individuals’ personal data. Employees are better informed than ever of their data protection rights, with employers receiving an increased number of subject access requests from their employees. Interesting, however, under the DPA, individuals…