(h)
(i)
Page 2 of Annex D
A data user should not be required to respond to subject access requests :
(i) unless he is supplied with such information as he may reasonably require in order to
to satisfy himself as to the identity of the person making the request and to locate the information which he seeks; or
he
to
other
the
(ii) if he cannot comply with the request without disclosing information relating to another individual who can be identified from that information, unless
is satisfied that the individual has consented disclosure of the information to the person making the request.
The reference to information relating to another individual includes a reference to
identifying that
information
individual as the source of information.
Whenever the data user withholds data on the basis of a statutory exemption, the data user should be legally required to inform the data subject of the exemption claimed unless doing so is likely to prejudice the purposes for which the data are kept or cause other serious harm. In such cases, data users should keep a log of cases in which a subject exemption is relied upon and the reasons for its use. The log should be available for inspection by the data protection authority and it is also be provided a periodic return.
Page 30Page 31
No comments yet.
Private notes are available after approval.