Portsmouth City Council has signed an undertaking after the Information Commissioner's Office (ICO) found it had inappropriately disclosed personal information. The disclosure occurred after an individual requested to see the information the council held about her through a subject access request, which was granted by an individual who was neither employed by the council nor acting on its behalf. The council informed the ICO of the breach, which found the supervision and training provided to staff involved in the subject access request process to be inadequate. The undertaking states that the council will improve its training on such requests.
If you want to comment on this post, you need to login.