Confidential references given by the data controller are exempt from subject access; but what about in the following situation.
A medical consultant (employee of the data controller) provides a confidential reference for another clinician (member of staff) for a promotion within the data controller's organisation. The clinician didn't get the job and has put in a SAR for the reference. The consultant has stated that it was confidential and does not want it released. As this is a confidential reference provided by the data controller (even though it was from the data controller to the data controller) does the exemption to the right of subject access still apply?
Nic Drew
Data Protection Manager
Cardiff and Vale University Local Health Board
---
Confidentiality
This message is strictly confidential and intended for the person or organisation
to whom it is addressed. If you are not the intended recipient of the message then please notify the sender
immediately. Any of the statements or comments made above should be regarded as personal and not necessarily those of Cardiff & Vale University Health Board, any constituent part or connected body.
Email communication is subject to monitoring; for further information http://www.wales.nhs.uk/sitesplus/864/page/50329
Mae'r neges hon yn gyfrinachol.
Os nad chi yw'r derbynnydd y bwriedid y neges
ar ei gyfer, byddwch mor garedig â rhoi gwybod
i'r anfonydd yn ddi-oed. Dylid ystyried unrhyw
ddatganiadau neu sylwadau a wneir uchod yn rhai
personol, ac nid o angenrhaid yn rhai o eiddo Bwrdd Iechyd Prifysgol
Caerdydd a’r Fro, nac unrhyw
ran gyfansoddol ohoni na chorff cysylltiedig.
Mae cyfathrebu drwy e-bost yn amodol l fonitro; am fwy o wybodaeth. http://www.wales.nhs.uk/sitesplus/864/page/45247
Freedom of Information
Please be aware that, under the terms of the Freedom of Information
Act 2000, Cardiff and Vale University Health Board may be required to make public the
content of any emails or correspondence received.
For further information on Freedom of Information, please refer to the
Cardiff and Vale UHB website http://www.wales.nhs.uk/sitesplus/864/cymraeg
Cofiwch fod yn ymwybodol ei bod yn bosibl
y bydd disgwyl i Bwrdd Iechyd Prifysgol Caerdydd a’r Fro
roi cyhoeddusrwydd i gynnwys
unrhyw ebost neu ohebiaeth a dderbynnir,
yn unol ag amodau'r Ddeddf Rhyddid Gwybodaeth 2000.
I gael mwy o wybodaeth am Ryddid Gwybodaeth,
cofiwch gyfeirio at wefan Bwrdd Iechyd Prifysgol Caerdydd a’r Fro
http://www.wales.nhs.uk/sitesplus/864/cymraeg
---
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
All archives of messages are stored permanently and are
available to the world wide web community at large at
http://www.jiscmail.ac.uk/lists/data-protection.html
If you wish to leave this list please send the command
leave data-protection to [log in to unmask]
All user commands can be found at http://www.jiscmail.ac.uk/help/commandref.htm
Any queries about sending or receiving messages please send to the list owner
[log in to unmask]
Full help Desk - please email [log in to unmask] describing your needs
To receive these emails in HTML format send the command:
SET data-protection HTML to [log in to unmask]
(all commands go to [log in to unmask] not the list please)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
