>Is there such a thing as requiring consent to respond to a SAR?
>Ian W
Yes, in that the question was not whether they needed consent to respond at all, but whether they need consent from the third party to provide (in response to the SAR) the third party's emails disclosed in full and without the third party's name being redacted. To which the answer is yes, unless, as the "third party" is an employee, you can imply that an employee has impliedly consented to such disclosures as part of their job and employment.
Chris
|