Data collecting, storing, sharing or selling. And data breaches

Hana Bednarova made this Rhyddid Gwybodaeth request to Avon and Somerset Constabulary

Automatic anti-spam measures are in place for this older request. Please let us know if a further response is expected or if you are having trouble responding.

Roedd y cais yn llwyddiannus.

Dear Avon and Somerset Constabulary,

I am making a Freedom of Information request to find out the answers to the below
questions. Please provide your responses in electronic format. Thank you in advance for
your time spent answering them.

Can I have your records pertaining to sales of personal data from 2019 (01.01.2019) to 2020 (31.12.2020), including trading partners and money earned from transactions?

Do you use tracking cookies on your website, and can I have a list of third parties
that you share personal data with?

Have you received any complaints about how you handle personal data? This
includes collecting, storing, sharing or selling, as well as wider processing
practices. Please can I view records pertaining to these complaints for the years 2019 and 2020?

How many Subject access requests did you receive in the period 2019-2020,
broken down by year? What types of personal data did they typically receive? For
example email addresses, home address and telephone number?

How many data breaches have you experienced for the past 5 years (broken down by each year).

Yours faithfully,

Hana Bednarova

#Freedom of Information Requests, Avon and Somerset Constabulary

Thank you for your request for information. Your request will now be considered and you will receive a response within the statutory timescale of 20 working days as defined by the Act. In some circumstances Avon and Somerset Constabulary may be unable to achieve this deadline if consideration needs to be given to the public interest test. If this is likely you will be informed and given a revised time-scale at the earliest opportunity.

dangos adrannau a ddyfynnir

#Freedom of Information Requests, Avon and Somerset Constabulary

2 Atodiad

Hana Bednarova Our 292/21
Reference
[FOI #735256 email] Date 09
April
2021

 

Dear H Bednarova,

 

Re: Request for information dated 10^th March 2021 under the Freedom of
Information Act.

 

I write in connection with your above request where you asked as follows:-

 

 1. Can I have your records pertaining to sales of personal data from 2019
(01.01.2019) to 2020 (31.12.2020), including trading partners and
money earned from transactions?

 

 2. Do you use tracking cookies on your website, and can I have a list of
third parties that you share personal data with?

 

 3. Have you received any complaints about how you handle personal data?
This includes collecting, storing, sharing or selling, as well as
wider processing practices. Please can I view records pertaining to
these complaints for the years 2019 and 2020?

 

 4. How many Subject access requests did you receive in the period
2019-2020, broken down by year? What types of personal data did they
typically receive? For example email addresses, home address and
telephone number?

 

 5. How many data breaches have you experienced for the past 5 years
(broken down by each year).

 

Our response:

 

Avon and Somerset Constabulary does not sell personal data therefore we
have no record of sales. However we do respond to requests from third
parties for personal data where there is a legal basis for providing this
information, and there are associated charges for these services. Examples
of this include the provision of Road Traffic Collision reports or crime
reports for insurance purposes and the fees for the provision of these
services are available on our website:

 

[1]https://www.avonandsomerset.police.uk/ab...

 

Your request for information in relation to question two has been
considered and I am not obliged to supply the information you have
requested.

 

The exemption applicable to this information is;

 

•              Section 21 – Information reasonably accessible by other
means.

 

This is an absolute and class based exemption and as such does not require
a harm and public interest test. The information requested is publicly
available to view on

 

[2]https://www.avonandsomerset.police.uk/he...

 

In accordance with the Act, this represents a Refusal Notice for this part
of your request.

 

Please find below a breakdown of the number of complaints which contained
allegations relating to the handing of personal data. A summary of these
complaints can be found attached.

 

+------------------------------------------------------------------------+
| 1^st Jan – 31^st Dec 2019 | 1^st Jan – 31^st Dec 2020 |
|------------------------------------+-----------------------------------|
| 63 | 66 |
+------------------------------------------------------------------------+

 

A total of 1081 Subject Access Requests (SAR) were received in 2019 and a
total of 1043 SARs were received in 2020. E-mail addresses, home address
and telephone numbers are provided to us by the Data Subject, in many
cases, in order for us to respond accordingly.

 

Personal information requested in a SAR is varied and is assessed on a
case by case basis. The information requested can include, but is not
limited, to the following;

 

•              Personal data contained within crime reports

•              Personal data contained within incident logs

•              Personal data contained within recorded calls to 101/999

•              Personal data contained within Body worn video

•              E-mails held in force where personal data is identified

•              Copies of their personal statements or interviews

 

The figures below are matters that have been reported to either the Data
Protection Officer or Information Security Team as a potential data
breach. An investigation into each report commences and in some cases no
evidence was identified to confirm that a breach has taken place. Due to
the way in which this data is recorded, each allegation file would need to
be opened to ascertain if the breach was confirmed.

 

+------------------------------------------------------------------------+
| 2016 | 2017 | 2018 | 2019 | 2020 |
|--------------+--------------+--------------+-------------+-------------|
| 79 | 84 | 100 | 132 | 86 |
+------------------------------------------------------------------------+

 

Yours sincerely,

 

Adam Northcott

FOI Disclosure Officer

 

Mail: Freedom of Information, Legal Services Directorate, Avon and
Somerset Constabulary, Force HQ, PO Box 37, Valley Road, Portishead,
BRISTOL, BS20 8QJ

Email  [3][email address]

 

[4]www.avonandsomerset.police.uk  |  Follow us on [5]Twitter and
[6]Facebook

 

Please note:

1.                    Requests and responses may be published on Avon and
Somerset Constabulary’s website (within 24 hours), some of which may

contain a link to additional information, which may provide you with
further clarification.

2.                    Whilst we may verbally discuss your request with you
in order to seek clarification, all other communication should be made in

writing.

3.                    Avon and Somerset Constabulary provides you with the
right to request a re-examination of your case under its review

procedure (copy attached).

dangos adrannau a ddyfynnir