In recent years I have seen a variety of s.29 (type) requests from police forces.
Some have been simple emails.
Some have been on forms compliant with Association of Chief Police Officers (ACPO) guidelines.
Others have been on Force forms (e.g., Metropolitan Police form 3022).
The vast majority have been inadequate as received. For example: no collar/shoulder numbers for requesting/authorising officers; no Single Point of Contact specified (every Police Station should have a designated SPOC); no authorisation/authorising officer; authorising officer of below Inspector rank, no signatures.
In many of these instances, the requesting officer has been unaware of 'standard procedure', Force orders, the ICO's advice, APCO's example form, or the need for the Data Controller to comply with the law. All have gone away to consult. A few have been unhappy at being asked to do so. Several have said that no other Data Controller (or Data Processor) has ever asked for a compliant request - and I believe them!
I advise that in a 'Hot pursuit' situation, the information is provided, if easily to hand; but that the requesting officer's collar/shoulder number and station name are taken and a subsequent, formal s.29 request is demanded, notified at the time (written and countersigned in the officer's notebook) and followed up. In other instances, a formal, ACPO-conformant s.29 request is required before any disclosure.
M
Sent from my iPad
On 24 Aug 2013, at 13:27, Roland Perry <[log in to unmask]> wrote:
> In message <[log in to unmask]>, at 12:00:02 on Fri, 23 Aug 2013, "[log in to unmask]" <[log in to unmask]> writes
>> I think generally that the practices are aware of what they should and shouldn't provide, although some may feel a bit under pressure if an officer arrives at the door.
>
> It depends what paperwork the officer has. I'd expect something signed by at least an Inspector, and with at least as much detail as required by the ISPs pre-RIPA (which was all agreed at great length with the ICO and ACPO): http://www.internetcrimeforum.org.uk/dpa29-3form.html#form
>
> I highly recommend reading notes 7, 8 &9.
>
> Indeed, I'd probably expect an even higher standard for medical records.
>
>> They just want some sort of payment for their time and effort
>
> Just as they do when performing non-core functions for the patents themselves!
> --
> Roland Perry
>
> ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
> All archives of messages are stored permanently and are
> available to the world wide web community at large at
> http://www.jiscmail.ac.uk/lists/data-protection.html
> If you wish to leave this list please send the command
> leave data-protection to [log in to unmask]
> All user commands can be found at http://www.jiscmail.ac.uk/help/commandref.htm
> Any queries about sending or receiving messages please send to the list owner
> [log in to unmask]
> Full help Desk - please email [log in to unmask] describing your needs
> To receive these emails in HTML format send the command:
> SET data-protection HTML to [log in to unmask]
> (all commands go to [log in to unmask] not the list please)
> ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
All archives of messages are stored permanently and are
available to the world wide web community at large at
http://www.jiscmail.ac.uk/lists/data-protection.html
If you wish to leave this list please send the command
leave data-protection to [log in to unmask]
All user commands can be found at http://www.jiscmail.ac.uk/help/commandref.htm
Any queries about sending or receiving messages please send to the list owner
[log in to unmask]
Full help Desk - please email [log in to unmask] describing your needs
To receive these emails in HTML format send the command:
SET data-protection HTML to [log in to unmask]
(all commands go to [log in to unmask] not the list please)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
|