Confidential references given by the data controller are exempt from subject access; but what about in the following situation.

 

A medical consultant (employee of the data controller) provides a confidential reference for another clinician (member of staff) for a promotion within the data controller’s organisation. The clinician didn’t get the job and has put in a SAR for the reference. The consultant has stated that it was confidential and does not want it released. As this is a confidential reference provided by the data controller (even though it was from the data controller to the data controller) does the exemption to the right of subject access still apply?

 

Nic Drew

Data Protection Manager

Cardiff and Vale University Local Health Board

 

Confidentiality

 This message is strictly confidential and intended for the person or organisation to whom it is addressed. If you are not the intended recipient of the message then please notify the sender immediately. Any of the statements or comments made above should be regarded as personal and not necessarily those of Cardiff & Vale University Health Board, any constituent part or connected body. Email communication is subject to monitoring; for further information http://www.wales.nhs.uk/sitesplus/864/page/50329

 Mae'r neges hon yn gyfrinachol. Os nad chi yw'r derbynnydd y bwriedid y neges ar ei gyfer, byddwch mor garedig â rhoi gwybod i'r anfonydd yn ddi-oed. Dylid ystyried unrhyw ddatganiadau neu sylwadau a wneir uchod yn rhai personol, ac nid o angenrhaid yn rhai o eiddo Bwrdd Iechyd Prifysgol Caerdydd a’r Fro, nac unrhyw ran gyfansoddol ohoni na chorff cysylltiedig. Mae cyfathrebu drwy e-bost yn amodol l fonitro; am fwy o wybodaeth. http://www.wales.nhs.uk/sitesplus/864/cymraeg

Freedom of Information

 Please be aware that, under the terms of the Freedom of Information Act 2000, Cardiff and Vale University Health Board may be required to make public the content of any emails or correspondence received. For further information on Freedom of Information, please refer to the Cardiff and Vale UHB website http://www.wales.nhs.uk/sitesplus/864/page/45247

Cofiwch fod yn ymwybodol ei bod yn bosibl y bydd disgwyl i Bwrdd Iechyd Prifysgol Caerdydd a’r Fro roi cyhoeddusrwydd i gynnwys unrhyw ebost neu ohebiaeth a dderbynnir, yn unol ag amodau'r Ddeddf Rhyddid Gwybodaeth 2000. I gael mwy o wybodaeth am Ryddid Gwybodaeth, cofiwch gyfeirio at wefan Bwrdd Iechyd Prifysgol Caerdydd a’r Fro http://www.wales.nhs.uk/sitesplus/864/cymraeg




All archives of messages are stored permanently and are available to the world wide web community at large at http://www.jiscmail.ac.uk/lists/data-protection.html

Selected commands (the command has been filled in below in the body of the email if you are receiving emails in HTML format):

All user commands can be found at http://www.jiscmail.ac.uk/help/commandref.htm and are sent in the body of an otherwise blank email to [log in to unmask]

Any queries about sending or receiving messages please send to the list owner [log in to unmask]

(Please send all commands to [log in to unmask] not the list or the moderators, and all requests for technical help to [log in to unmask], the general office helpline)