>I am dealing with a subject access request for a person who is mentioned
>as a 3rd party several times in reports from internal investigations,
>disciplinary proceedings, etc.
This wouldn't be a case of disclosing information about a third party as
mentioned in the DPA would it? The data subject is mentioned as a party in
the reports but is not a third party as far as his/her SAR is concerned.
I can see why there would be a case to refuse to disclose the whole
documents but not for a refusal to disclose full stop. Unless it would
identify other parties to the investigations I would be inclined to extract
the facts/opinions relating to the data subject from the reports and supply
those.
Regards,
Graham
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
All archives of messages are stored permanently and are
available to the world wide web community at large at
http://www.jiscmail.ac.uk/lists/data-protection.html
If you wish to leave this list please send the command
leave data-protection to [log in to unmask]
All user commands can be found at : -
http://www.jiscmail.ac.uk/help/commandref.htm
(all commands go to [log in to unmask] not the list please)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
|