Organisations in Belfast and across Northern Ireland face SARs linked to employment disputes, health and social care records and customer complaints — sometimes with data held on both sides of the border.

We handle the full response for NI organisations remotely and on a fixed fee. The ICO's Northern Ireland office is based in Belfast and handles complaints locally.

Employment disputes and Industrial Tribunals

In Northern Ireland, employment claims are heard by the Industrial Tribunals and the Fair Employment Tribunal rather than Employment Tribunals. The pattern is familiar, though: SARs are often used by employees and their representatives to gather material before deciding whether to bring a claim.

Responses need to be complete and every redaction documented, on the assumption they will be examined later. Our guide to SARs from former employees covers the common pitfalls.

Integrated health and social care

Health and social care in Northern Ireland is delivered together through Health and Social Care Trusts. A single record can mix clinical notes with social work material, so both the health data serious harm test and the social work exemption may be relevant. Each has to be applied to specific information, with the right professional involved.

Cross-border data

Many NI businesses operate in the Republic of Ireland too, where EU GDPR applies and the Data Protection Commission regulates. Where a group has entities in both jurisdictions, the first question is which entity is the controller for the data requested — that decides which law governs the response and which regulator oversees it.

Sectors we support in Northern Ireland

Public sector and HSC trusts

Integrated health and social care records alongside HR requests.

Employers and manufacturing

Employee requests ahead of Industrial Tribunal or fair employment claims.

Financial and professional services

Client complaints and staff requests in regulated firms.

Cross-border businesses

Groups with entities in both Northern Ireland and the Republic of Ireland.

How we handle your SAR remotely

  1. Tell us about the request — the systems involved, the date range and your deadline. We confirm a fixed fee within 24 hours.
  2. Upload the documents to an encrypted, access-controlled workspace. Nothing is emailed.
  3. Our specialists review every item and redact third-party and exempt information, logging the legal basis for each decision.
  4. You receive a finished disclosure pack, covering letter and redaction schedule, ready to send.

Every case is quoted individually on the size and complexity of your dataset, and the fixed fee is agreed before any work begins.

Received a SAR in Northern Ireland?

Tell us the scope and your deadline, and we'll confirm a fixed fee within 24 hours. No commitment required.

Get Your Free SAR Assessment →or call 01244 261 379

Frequently asked questions

Does UK GDPR apply in Northern Ireland?

Yes. UK GDPR and the Data Protection Act 2018 apply across Northern Ireland, and the ICO regulates SARs through its Belfast office.

Is a SAR still valid if it's linked to a tribunal claim?

Yes. The motive for a SAR doesn't affect its validity, and it must be answered in full within the deadline even where a claim is contemplated or underway.

Our group operates in the Republic too — which law applies?

It depends on which entity is the controller for the data requested. A Northern Ireland controller follows UK GDPR; an Irish controller follows EU GDPR under the Data Protection Commission.