Yes, I think so. The Schedule 7 exemption doesn't state or imply that the reference given by the controller must be given to another data controller for it to bite.
Jonathan Baines
Complaints and Information Rights Officer
Legal and Democratic Services
Buckinghamshire County Council
01296 383681
Follow us on twitter @buckscclegal
From: This list is for those interested in Data Protection issues [mailto:[log in to unmask]] On Behalf Of Nic Drew (Cardiff and Vale UHB - IT Security)
Sent: 31 October 2013 09:21
To: [log in to unmask]
Subject: [data-protection] Confidential references
Confidential references given by the data controller are exempt from subject access; but what about in the following situation.
A medical consultant (employee of the data controller) provides a confidential reference for another clinician (member of staff) for a promotion within the data controller's organisation. The clinician didn't get the job and has put in a SAR for the reference. The consultant has stated that it was confidential and does not want it released. As this is a confidential reference provided by the data controller (even though it was from the data controller to the data controller) does the exemption to the right of subject access still apply?
Nic Drew
Data Protection Manager
Cardiff and Vale University Local Health Board
Confidentiality
This message is strictly confidential and intended for the person or organisation to whom it is addressed. If you are not the intended recipient of the message then please notify the sender immediately. Any of the statements or comments made above should be regarded as personal and not necessarily those of Cardiff & Vale University Health Board, any constituent part or connected body. Email communication is subject to monitoring; for further information http://www.wales.nhs.uk/sitesplus/864/page/50329
Mae'r neges hon yn gyfrinachol. Os nad chi yw'r derbynnydd y bwriedid y neges ar ei gyfer, byddwch mor garedig ? rhoi gwybod i'r anfonydd yn ddi-oed. Dylid ystyried unrhyw ddatganiadau neu sylwadau a wneir uchod yn rhai personol, ac nid o angenrhaid yn rhai o eiddo Bwrdd Iechyd Prifysgol Caerdydd a?r Fro, nac unrhyw ran gyfansoddol ohoni na chorff cysylltiedig. Mae cyfathrebu drwy e-bost yn amodol l fonitro; am fwy o wybodaeth. http://www.wales.nhs.uk/sitesplus/864/cymraeg<http://www.wales.nhs.uk/sitesplus/864/page/45247>
Freedom of Information
Please be aware that, under the terms of the Freedom of Information Act 2000, Cardiff and Vale University Health Board may be required to make public the content of any emails or correspondence received. For further information on Freedom of Information, please refer to the Cardiff and Vale UHB website http://www.wales.nhs.uk/sitesplus/864/page/45247<http://www.wales.nhs.uk/sitesplus/864/cymraeg>
Cofiwch fod yn ymwybodol ei bod yn bosibl y bydd disgwyl i Bwrdd Iechyd Prifysgol Caerdydd a?r Fro roi cyhoeddusrwydd i gynnwys unrhyw ebost neu ohebiaeth a dderbynnir, yn unol ag amodau'r Ddeddf Rhyddid Gwybodaeth 2000. I gael mwy o wybodaeth am Ryddid Gwybodaeth, cofiwch gyfeirio at wefan Bwrdd Iechyd Prifysgol Caerdydd a?r Fro http://www.wales.nhs.uk/sitesplus/864/cymraeg
________________________________
________________________________
________________________________
All archives of messages are stored permanently and are available to the world wide web community at large at http://www.jiscmail.ac.uk/lists/data-protection.html
Selected commands (the command has been filled in below in the body of the email if you are receiving emails in HTML format):
* Leaving this list: send leave data-protection to [log in to unmask]<mailto:[log in to unmask]&BODY=LEAVE%20data-protection>
* Suspending emails from all JISCMail lists: send SET * NOMAIL to [log in to unmask]<mailto:[log in to unmask]&BODY=SET%20*%20NOMAIL>
* To receive emails from this list in text format: send SET data-protection NOHTML to [log in to unmask]<mailto:[log in to unmask]&BODY=SET%20data-protection%20NOHTML>
* To receive emails from this list in HTML format: send SET data-protection HTML to [log in to unmask]<mailto:[log in to unmask]&BODY=SET%20data-protection%20HTML>
All user commands can be found at http://www.jiscmail.ac.uk/help/commandref.htm and are sent in the body of an otherwise blank email to [log in to unmask]<mailto:[log in to unmask]>
Any queries about sending or receiving messages please send to the list owner [log in to unmask]<mailto:[log in to unmask]>
(Please send all commands to [log in to unmask]<mailto:[log in to unmask]> not the list or the moderators, and all requests for technical help to [log in to unmask]<mailto:[log in to unmask]>, the general office helpline)
________________________________
Buckinghamshire County Council
Visit our Web Site : http://www.buckscc.gov.uk
Buckinghamshire County Council Email Disclaimer
This Email, and any attachments, may contain Protected or Restricted information and is intended solely for the individual to whom it is addressed. It may contain sensitive or protectively marked material and should be handled accordingly. If this Email has been misdirected, please notify the author or [log in to unmask] immediately. If you are not the intended recipient you must not disclose, distribute, copy, print or rely on any of the information contained in it or attached, and all copies must be deleted immediately. Whilst we take reasonable steps to try to identify any software viruses, any attachments to this Email may nevertheless contain viruses which our anti-virus software has failed to identify. You should therefore carry out your own anti-virus checks before opening any documents.
Buckinghamshire County Council will not accept any liability for damage caused by computer viruses emanating from any attachment or other document supplied with this email.
All GCSx traffic may be subject to recording and / or monitoring in accordance with relevant legislation.
The views expressed in this email are not necessarily those of Buckinghamshire County Council unless explicitly stated.
This footnote also confirms that this email has been swept for content and for the presence of computer viruses.
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
All archives of messages are stored permanently and are
available to the world wide web community at large at
http://www.jiscmail.ac.uk/lists/data-protection.html
If you wish to leave this list please send the command
leave data-protection to [log in to unmask]
All user commands can be found at http://www.jiscmail.ac.uk/help/commandref.htm
Any queries about sending or receiving messages please send to the list owner
[log in to unmask]
Full help Desk - please email [log in to unmask] describing your needs
To receive these emails in HTML format send the command:
SET data-protection HTML to [log in to unmask]
(all commands go to [log in to unmask] not the list please)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
