Here at MultiUnion, we spend every day fighting for fairness and power for workers. We know that in the modern workplace, the power dynamic is incredibly one-sided. Your employer collects vast amounts of data about you—not just your official HR file, but your emails, your messages on Teams or Slack, performance notes, even the metadata of your daily work.
They build a digital profile, but what do you really know about what’s being held, how it’s being used, or what decisions are being made based on it?
We believe it’s time to flip the script. That’s why we built CorpSpy — a free tool designed to help you submit a powerful subject access request in just a few clicks. It’s not about being paranoid; it’s about being informed. It’s about transparency, accountability, and asserting your fundamental rights.
What is a Subject Access Request?
A subject access request (often called an SAR) is your legal right under UK data protection law to ask an organisation for a copy of the personal data they hold about you. Companies are legally obliged to respond to a valid subject access request within one month, free of charge.
Using CorpSpy, you can submit a formal subject access request to more than 91,000 UK companies. This isn’t just about payroll details. Under the law, “personal data” includes:
- Your internal emails and chat logs.
- Notes from meetings with your manager.
- Records of your performance reviews.
- Any internal investigations or disciplinary notes.
- Even CCTV footage of you at work.
Why Should You Make a Subject Access Request?
Your employer has a legal duty to be transparent. Making a subject access request helps you enforce that duty. Here’s why we think every worker should consider making an SAR using CorpSpy:
- Know What They Know: Before a crucial performance review, a disciplinary meeting, or even a redundancy consultation, wouldn't you want to know what evidence they've gathered? A subject access request gives you the power to see the full picture they have of you.
- Hold Them Accountable: Companies can make mistakes. They might hold incorrect information, outdated data, or make decisions based on biased notes. By making a subject access request, you can check the accuracy of their data and demand corrections. This isn't just about privacy; it's about fairness.
- Level the Playing Field: Knowledge is power in any negotiation. Whether you're discussing a pay rise, a promotion, or raising a grievance, having access to the complete data trail about your employment gives you the information you need to advocate for yourself effectively.
- It’s Your Legal Right: The right to make a subject access request is enshrined in UK law. You don't need a reason, and it's usually free. CorpSpy makes exercising this right effortless.
See What’s Being Said About You Behind Your Back
Have you ever wondered what’s really in those Slack DMs between your manager and their boss? Or what was said in a meeting about your project that you weren't invited to?
When you make a subject access request using CorpSpy, you are legally entitled to see internal communications — like emails, Microsoft Teams chats, and Slack messages — where you are discussed. If your name appears in a conversation, a performance review draft, or a planning chat, that information belongs to you.
This is often where the real story of your workplace life is written. The casual comment, the off-hand remark, the private discussion about your future — seeing this record can provide crucial context for understanding your position, challenging unfair treatment, or simply knowing where you truly stand.
How to Make a Subject Access Request Using CorpSpy
Making a subject access request is your right, and we've made the process straightforward and completely free:
- Go to the CorpSpy tool here on our site.
- Search for your company. If they’re listed (and with over 91,000 on the register, there’s a very good chance they are), you select them.
- Fill in your details in the simple form.
- CorpSpy automatically generates a formal, legally sound subject access request and sends it to your employer’s registered data protection contact.
That’s it. Your employer is now legally on the clock. They have 30 days to respond to your subject access request and provide you with a copy of all the personal data they hold — including those hidden conversations.
If your company isn't on the list, contact us and we'll add it. We are building this tool for workers, by workers, and we want it to work for everyone.
Don’t Be a Subject, Be an Agent
The world of work is changing. Surveillance and data collection are becoming the norm. It’s easy to feel like a small cog in a vast machine. But the law provides us with tools — like the subject access request — to fight back against that feeling of powerlessness.
At MultiUnion, we built CorpSpy to be more than just a form-filler. It’s a statement. It says: My data is mine. My privacy matters. And I have a right to know what you’re doing with my working life.
Make your subject access request with CorpSpy today and take the first step toward a more transparent and fairer working relationship. It’s your data. It’s your right. Take it back.