Can a settlement agreement provide that an employee will withdraw a DSAR? At first glance, it may seem possible for a settlement agreement to provide that the employee gives up (waives) their right of access under Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR) and/or Data Protection Act 2018 (DPA 2018), since there is no restriction in DPA 2018 on the data subject agreeing, by way of a settlement agreement or other contract, to ‘contract out’ of their right to make a DSAR under the GDPR or DPA 2018. Where there is a contracting-out mechanism (eg section 203 of the Employment Rights Act 1996 (ERA 1996)), it will provide that: • any contracting out of the right to bring claims is generally void (see, for example, ERA 1996, s 203(1)),