‘Under Section 56 of the Data Protection Act 1998 (DPA), it will soon be a criminal offence for an employer or other third party to require a data subject to supply records obtained through a subject access request. An employer, or a supplier of goods and services, cannot therefore make employment or provision of goods and services conditional on a data subject making a subject access request and providing their records.’
Halsbury’s Law Exchange, 26th February 2015
Source: www.halsburyslawexchange.co.uk
