Hi all,
This is a question I asked the ICO about a year ago but would like some
consensus on what practice the profession generally uses. To be exact do
you explain why you have not disclosed certain PD when replying to a SAR or
do you just say, "In accordance with...you are receving what you are
entitled to..."
I was told that it does not state anywhere in the act we have to do this,
and this is the approach I took when responding. However my new post has a
convention from the previous DPO that they explain every little detail of
what and why they are not receiving certain PD. Personally I prefer the
first approach especially as I have my hands full with FOI and already
having to explain those exemptions.
thanks for any help
Simon.
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
All archives of messages are stored permanently and are
available to the world wide web community at large at
http://www.jiscmail.ac.uk/lists/data-protection.html
If you wish to leave this list please send the command
leave data-protection to [log in to unmask]
All user commands can be found at : -
http://www.jiscmail.ac.uk/help/commandref.htm
(all commands go to [log in to unmask] not the list please)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
|