“There is a lack of suitable knowledge within the council as clearly they don’t know how to properly redact text.“
So, one of our local District Councils has been reported by us today to the ICO for its failure to address an issue we first told them about in April of 2024. [See Here]
It’s six and a half months since we reported they were exposing data that should not be in the public domain, but the data protection team at this council have done nothing to solve the problem.
As I told them in my email on 27th April 2024, clearly there are a number of problems here:
- There is a lack of suitable knowledge within the council as clearly they don’t know how to properly redact text.
- There are very likely other documents that have been processed by the council which they’ve redacted incorrectly.
- These are breaches of personal data by an organisation that should know better.
We did offer them some on-site assistance to their IT team at our discounted rates, but they never took us up on the offer.
Today, as result of other enquiries we had from other local councils, we’ve published further details of our Subject Access Request Support Service. The service can be applied to any Subject Access Request for any organisation.
If you are facing a subject access request, or need help properly redacting data, please check it out here.