I would not advise that an organisation give consent obo an employee, except in case of normally publicly-disclosed data, such as a corporate email address.
M
Sent from my iPad
> On 5 Oct 2015, at 12:56, Paul Ticher <[log in to unmask]> wrote:
>
> Colleagues,
>
> As we know, section 7 of the Act says, in part:
> (4) Where a data controller cannot comply with the [subject access] request without disclosing information relating to another individual who can be identified from that information, he is not obliged to comply with the request unless—
> (a) the other individual has consented to the disclosure of the information to the person making the request, or
> (b) it is reasonable in all the circumstances to comply with the request without the consent of the other individual.
>
> Note that the third party has to be an individual, not an organisation. However, where information has been received from an organisation, it appears to me to be common practice to seek consent from the organisation on behalf of the individuals who work for it, rather than from the individuals themselves.
>
> Is that others' experience?
>
> Or is the request to the organisation based on some provision other than s.7?
>
> Best wishes,
>
> Paul
>
>
> Paul Ticher
> 0116 273 8191
> www.paulticher.com
> 22 Stoughton Drive North, Leicester LE5 5UB
> All archives of messages are stored permanently and are available to the world wide web community at large at http://www.jiscmail.ac.uk/lists/data-protection.html
>
> Selected commands (the command has been filled in below in the body of the email if you are receiving emails in HTML format):
>
> Leaving this list: send leave data-protection to [log in to unmask]
> Suspending emails from all JISCMail lists: send SET * NOMAIL to [log in to unmask]
> To receive emails from this list in text format: send SET data-protection NOHTML to [log in to unmask]
> To receive emails from this list in HTML format: send SET data-protection HTML to [log in to unmask]
> All user commands can be found at http://www.jiscmail.ac.uk/help/commandref.htm and are sent in the body of an otherwise blank email to [log in to unmask]
>
> Any queries about sending or receiving messages please send to the list owner [log in to unmask]
>
> (Please send all commands to [log in to unmask] not the list or the moderators, and all requests for technical help to [log in to unmask], the general office helpline)
>
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
All archives of messages are stored permanently and are
available to the world wide web community at large at
http://www.jiscmail.ac.uk/lists/data-protection.html
If you wish to leave this list please send the command
leave data-protection to [log in to unmask]
All user commands can be found at http://www.jiscmail.ac.uk/help/commandref.htm
Any queries about sending or receiving messages please send to the list owner
[log in to unmask]
Full help Desk - please email [log in to unmask] describing your needs
To receive these emails in HTML format send the command:
SET data-protection HTML to [log in to unmask]
(all commands go to [log in to unmask] not the list please)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
