Leading digital forensics firm SYTECH Consultants has reported a sharp increase in corporate instructions from businesses struggling to manage incoming Data Subject Access Requests (DSARs) from former employees. This surge coincides with the stringent new rules fully enforced under the Data (Use and Access) Act 2025 (DUAA).
The regulatory shifts implemented throughout 2026, most notably the 19 June 2026 mandatory complaints-handling framework, have fundamentally intensified the burden on employers. Organisations are now legally required to give data subjects a structured, clear pathway to lodge complaints directly with the business regarding how their data was processed or reviewed. If an employer fails to handle these queries properly, or fails to issue an official acknowledgement within 30 days, the matter escalates directly to the Information Commissioner’s Office (ICO), opening the door to severe corporate penalties.
Compounding this pressure, changes in October 2026 will extend the timeframe for employees to bring claims to an employment tribunal from three months to six months. As a result, businesses are experiencing an influx of data access requests from former workers searching for disclosable internal emails, investigation notes, and Slack or WhatsApp communication to leverage in potential litigation.
“Modern data requests are increasingly compiled using AI tools, meaning former employees routinely demand everything,” said Mark Wilshaw, Information Security Manager at SYTECH. “While the DUAA introduces a statutory requirement that searches only need to be ‘reasonable and proportionate,’ the administrative reality of locating, auditing, and securely redacting complex digital data remains an operational nightmare for internal HR and IT departments.”
A compliance failure can be financially devastating. Under the updated 2026 ICO enforcement rules, top-tier penalties for serious data governance breaches can reach up to £17.5 million or 4% of global annual turnover.
To insulate businesses from legal and financial exposure, SYTECH has expanded its targeted Corporate and Enterprise Digital Forensic Services. Backed by nearly five decades of specialist forensic expertise, SYTECH acts as an independent partner to rapidly triage, preserve, and isolate relevant historical communication data from corporate servers, mobile devices, and cloud platforms.
SYTECH’s specialised Data Investigation and Analysis services help businesses by:
- Executing Proportional Searches: Utilising advanced tools like Magnet AXIOM to extract only what is legally disclosable, isolating vast data backlogs (such as years of Outlook PST files) within tight timeframes.
- Secure Redaction & Triaging: Safeguarding third-party privacy by identifying and redacting data that belongs to other employees or clients before records are released.
- Court-Ready Reporting: Delivering clear, legally defensible forensic reporting and Expert Witness Services should the former employee’s request transition into an active employment tribunal.
“Data access requests shouldn’t be treated as a simple administrative task; they are the frontline of corporate legal defence,” added Mark Wilshaw. “Our objective, evidence-led approach ensures businesses comply fully with the Data (Use and Access) Act without draining internal resources or accidentally exposing sensitive corporate data.”
Originating in 1978, SYTECH operates from UK offices offering a broad range of multi-disciplinary expertise. SYTECH specialises in forensic investigation, including digital device analysis, telecommunications, data recovery, and incident response, along with leading cyber security solutions including Cyber-Infrastructure Consultancy, Cyber Essentials Plus Certification, Penetration Testing, and Vulnerability Assessments.
SYTECH delivers precise, results-driven solutions through its highly experienced team of professional experts and analysts, ensuring client success across diverse and complex challenges.
The firm upholds a comprehensive portfolio of internationally recognised quality certifications, including ISO 17025, ISO 27001, ISO 9001, and ISO 14001, reflecting an unwavering commitment to excellence and operational integrity.
SYTECH provides comprehensive consultancy and training support to help organisations achieve and maintain these rigorous standards. Its expertise in ISO 17025 has expanded into industries such as water treatment, pharmaceuticals, and manufacturing, making SYTECH a trusted partner for operational compliance across sectors.
For more information visit: https://sytech-consultants.com/
