Our insurance manager tells me that we often receive claims from members of the public or staff via their soliciter. In order to process these we need to exchange sensitive personal data with a number of organisations (medical, insurance companies etc.). To fully comply with the first principle we would have to inform the data subject of these disclosures.
If we inform the data subject's soliciter of these disclosures as the soliciter is representing the subject have our obligations been met or do we have to inform the data subject directly?
Any thoughts?
Neil
___________________________
Neil Chadwick
Stoke-on-Trent City Council
|