Question: are references exempt from gdpr?
Answer: The exemption only applied to references given by the organisation. ... This means that if an organisation receives a subject access request, confidential employment references about the individual making the request, whether created by that organisation or received from a third party, will be exempt from disclosure.