Print

Print


Ignoring the issue of the delay, there is no reason why you shouldn't go
back to them and tell them what information you had expected to receive but
haven't, and ask for them to look again, or provide you with an explanation.
This has happened with a number of SARs I've dealt with (especially staff
cases), where they expected to receive (for example) holiday/sickness
records/appraisals from years earlier which we had actually ditched in line
with our retention policies.

-----Original Message-----
From: Ben Cawley [mailto:[log in to unmask]]
Sent: 14 January 2004 13:21
To: [log in to unmask]
Subject: [data-protection] SAR


Hi,

Just wondered what your opinions of a recent subject access request I
sent to an ex-employer of mine.  First a bit of background, this is an
American IT company providing the IT infrastructure and support to a
major British military company. Anyhow, I worked for them for six months
and as I am now doing a PhD that is looking into SAR/IAR I decided to
send a SAR to see what the response was as a kind of case study. Anyhow,
I was very surprised after paying my fees and proving proof of identity,
that the forty day limit came and went.  I made a few phone calls to the
head office and after speaking to the data protection officers there
(who where very nice and helpful) told me that they had sent the request
to the wrong person and that was the reason for the delay but that they
hoped to have something ready to send by the end of the week.  In fact,
it took them 83 days to respond to my request, and when I did eventually
receive something it was missing a lot of information that I think
(though I am not 100% certain of this) they keep on there records
system.

I was just wondering if anyone else has any opinion on this, and if you
can advise me on how your company deals with SAR/IAR to ensure you
comply with the DPA/FOI?

Thanks in advance.

Ben

^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
       All archives of messages are stored permanently and are
      available to the world wide web community at large at
      http://www.jiscmail.ac.uk/lists/data-protection.html
      If you wish to leave this list please send the command
       leave data-protection to [log in to unmask]
            All user commands can be found at : -
        http://www.jiscmail.ac.uk/help/commandref.htm
  (all commands go to [log in to unmask] not the list please)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
       All archives of messages are stored permanently and are
      available to the world wide web community at large at
      http://www.jiscmail.ac.uk/lists/data-protection.html
      If you wish to leave this list please send the command
       leave data-protection to [log in to unmask]
            All user commands can be found at : -
        http://www.jiscmail.ac.uk/help/commandref.htm
  (all commands go to [log in to unmask] not the list please)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^