Access To Information Held In Complaint Files

The Information Commissioner's Office recently published guidance about access to information held in complaint files. The guidance is relevant to both subject access requests under the Data Protection Act and requests for information under the Freedom of Information Act.

It is notoriously difficult for organisations to comply properly with personal data requests as decisions about what data are personal data and what information can be shared are not always straightforward. The guidance details various methods by which organisations may lessen the burden of such requests, and on first glance appears to indicate that organisations that use these methods do not have to provide all the information stored in complaint files in order to comply with a personal data request. Whilst, however, such methods may be appropriate for basic requests, a data controller must still comply with all legal requirements.

To view the article in full, please see below:

Full Article

The Information Commissioner's Office ("ICO") has issued new guidance which is designed to help all organisations that hold complaint files to deal with requests for access to personal information held in them. The guidance deals with the issues that arise when an individual makes a subject access request under the Data Protection Act ("DPA") for access to their own personal data. It also deals with the issues that arise when a third party makes a Freedom of Information Act ("FOIA") request to a public authority for access to data held in a complaint file.

The guidance is designed to...