How should employers respond when AI is used to create complex, high volume, or strategically motivated requests?
Anyone can now use generative AI to turn a routine subject access request into a lengthy, highly detailed document. For your organisation, that means more data to locate, review and redact, and more pressure on already stretched teams.
Join specialist DPO, Paul Griffiths, and an employment lawyer for an in-person breakfast event, designed to help you understand your obligations, where the limits may lie, and how to respond in a way that is proportionate, defensible, and respectful of individual rights.
Hosted by The DPO Centre, the session will explore:
- How to recognise when AI is driving the scale or complexity of a request
- The warning signs that a request may be strategically motivated
- When you can legally challenge or limit what’s being asked for
- Whether WhatsApp messages and emojis count as personal data
Agenda Highlights
The morning will start with expert insights, followed by a mini redaction exercise and real-world scenarios to help you test your current approach.
After a coffee break, an employment lawyer will examine the grey areas, including when an employer may be able to challenge where AI appears to have been used with malicious intent.
The session will close with a panel Q&A and time to network with fellow attendees.
Event details
When: 8:30am Tuesday 29 September 2026
Where: Ravenwood Hall, Bury St Edmunds, IP30 9JA
Places are limited. Register your interest below.


