It has to be a two-way street here. If the employee has a legitimate interest—and he does in personal information, of course--he should provide the employer with some parameters to get the information. Otherwise, you're asking employers to go through literally millions of pieces of paper and records to find things, if it's a request like, “I need pension information or health information.”
On December 4th, 2006. See this statement in context.