Following a job re-evaluation, such as those carried out using for example
the 'Hay' methodology and as a result of an individual requesting it, what
level of disclosure following a subject access request would be required in
order to comply with the DPA S7. My own views are that this is not simply
an evaluation of a 'post' (non - personal data) but of the individual in
that post and that all of the related paperwork is clearly personal data as
it relates directly to the individual requesting the re-evaluation (relevant
filing system). I also believe that the individual is entitled to have the
methodology explained (intelligible form) which informs as to how the
decision is reached. I do not believe that this would necessarily reveal a
'trade secret' nor allow a data controller to rely on the management /
negotiation miscellaneous exemptions. How could an individual mount a
reasonable appeal if they are refused access ? - Any other views out there ?
Peter Lane.
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
All archives of messages are stored permanently and are
available to the world wide web community at large at
http://www.jiscmail.ac.uk/lists/data-protection.html
If you wish to leave this list please send the command
leave data-protection to [log in to unmask]
All user commands can be found at : -
www.jiscmail.ac.uk/user-manual/summary-user-commands.htm
(all commands go to [log in to unmask] not the list please)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
|