Data collecting, storing, sharing or selling. And data breaches

Hana Bednarova made this Rhyddid Gwybodaeth request to Cheshire Constabulary

Automatic anti-spam measures are in place for this older request. Please let us know if a further response is expected or if you are having trouble responding.

Roedd y cais yn llwyddiannus.

Dear Cheshire Constabulary,

am making a Freedom of Information request to find out the answers to the below
questions. Please provide your responses in electronic format. Thank you in advance for
your time spent answering them.

Can I have your records pertaining to sales of personal data from 2019 (01.01.2019) to 2020 (31.12.2020), including trading partners and money earned from transactions?

Do you use tracking cookies on your website, and can I have a list of third parties
that you share personal data with?

Have you received any complaints about how you handle personal data? This
includes collecting, storing, sharing or selling, as well as wider processing
practices. Please can I view records pertaining to these complaints for the years 2019 and 2020?

How many Subject access requests did you receive in the period 2019-2020,
broken down by year? What types of personal data did they typically receive? For
example email addresses, home address and telephone number?

How many data breaches have you experienced for the past 5 years (broken down by each year).

Yours faithfully,

Hana Bednarova

Freedom of Information, Cheshire Constabulary

Dear Sir/Madam

I acknowledge receipt of your correspondence received 10/03/2021 which is
being dealt with as a request for information in accordance with the
Freedom of Information Act 2000.
I am in the process of dealing with your request and will respond in due
course and in any case by 08/04/2021.

Please note that you will not receive a response if you have previously
been issued with a notice under section 14 of the act relating to the
subject of this request.

Please contact us by email at [1][email address] if you
have any further enquiries.

Regards

The Requests Team
Information Compliance
Cheshire Constabulary HQ
Clemonds Hey
Oakmere Road
Winsford
Cheshire
CW7 2UA

Tel :: 01606 362384

This communication is intended for the addressee(s) only. Please notify
the sender if received in error. Internet email is not to be treated as a
secure means of communication. The Constabulary monitors all Internet and
email activity and requires it is used for official communications only.
Thank you for your co-operation.

References

Visible links
1. mailto:[email address]

Requests, Cheshire Constabulary

2 Atodiad

Dear Ms Bednarova,

 

YOUR REQUEST:

​Can I have your records pertaining to sales of personal data from 2019
(01.01.2019) to 2020 (31.12.2020), including trading partners and money
earned from transactions?

2.Do you use tracking cookies on your website, and can I have a list of
third parties that you share personal data with?

3.Have you received any complaints about how you handle personal data?
This includes collecting, storing, sharing or selling, as well as wider
processing practices. Please can I view records pertaining to these
complaints for the years 2019 and 2020?

4.How many Subject access requests did you receive in the period
2019-2020, broken down by year? What types of personal data did they
typically receive? For example email addresses, home address and telephone
number?

5.How many data breaches have you experienced for the past 5 years (broken
down by each year).

 

OUR RESPONSE:

 

In accordance with section 1(1) (b) of the Act, our response is as
follows:

 

Section 1 of the Freedom of Information Act 2000 (FOIA) places two duties
on public authorities.  Unless exemptions apply, the first duty at
s1(1)(a) is to confirm or deny whether the information specified in a
request is held.  The second duty at s1(1)(b) is to disclose information
that has been confirmed as being held.  Where exemptions are relied upon
Section 17 of the FOIA requires that we provide the applicant with a
notice which: a) states that fact; b) specifies the exemptions in question
and c) state (if that would not otherwise be apparent) why the
exemption(s) applies.

 

From our preliminary assessment we are unable to provide this as it would
exceed the appropriate costs limit under section 12 of the Freedom of
Information Act 2000. This is currently £450. The basis for this
calculation is the cost of retrieving the data to answer your questions.

 

To obtain the relevant information relating to the above request we would
need to read through every subject access request to see what information
was requested. There are over 500 requests in 2019 alone. It would take
one member of staff approximately 5 minutes per record equating to in
excess of 41 hours of work. Your entire request is therefore refused.

 

The appropriate limit is defined in the Data Protection and Freedom of
Information (Fees and Appropriate Limit) Regulations 2004, which is
covered by statutory Instrument Number 3244 of 2004. Furthermore, Section
12 of the Freedom of Information Act 2000 allows a public authority to
refuse to respond to a request for information where the cost of
compliance would exceed the appropriate limit as defined by the above
mentioned regulations.

 

However in order to assist you if you wish to redefine your request we may
be able to provide you with some information within cost. For example we
may be able to provide a response to Q1, Q4, Q5 and yearly figure for Q3
within cost.

 

If you are not satisfied with the decision applied in this case I enclose
for your attention a copy of the Constabulary's appeal procedures.

 

Regards

 

 

Julie Watson – Request Compliance Officer

Cheshire Constabulary and Cheshire Fire & Rescue Service Joint Corporate
Services

Information Compliance | Cheshire Constabulary | Clemonds Hey | Oakmere
Road | Winsford | Cheshire | CW7 2UA

Phone: 01606 362384| Visit [1]www.cheshire.police.uk |
[2]www.cheshirefire.gov.uk | Follow [3]@cheshirepolice and @CheshireFire
on Twitter | Like [4]Cheshire Police and Cheshire Fire and Rescue Service
on Facebook

 

[5]cid:image001.png@01D336C2.D0FEEF40

 

This communication is intended for the addressee(s) only. Please notify
the sender if received in error. Internet email is not to be treated as a
secure means of communication. The Constabulary monitors all Internet and
email activity and requires it is used for official communications only.
Thank you for your co-operation.

References

Visible links
1. http://www.cheshire.police.uk/
2. http://www.cheshirefire.gov.uk/
3. http://www.twitter.com/cheshirepolice
4. http://www.facebook.com/cheshirepolice

Dear Julie,

Thank you for your response and all the information.

It'd be very much appreciated if you could share information (within the cost) for to Q1, Q4, Q5 and yearly figure for Q3. If that is still over the limit, questions 1,4 and 5 will be very much appreciated.

Yours sincerely,

Hana Bednarova

Freedom of Information, Cheshire Constabulary

Dear Sir/Madam

I acknowledge receipt of your correspondence received 31/03/2021 which is
being dealt with as a request for information in accordance with the
Freedom of Information Act 2000.
I am in the process of dealing with your request and will respond in due
course and in any case by 29/04/2021.

Please note that you will not receive a response if you have previously
been issued with a notice under section 14 of the act relating to the
subject of this request.

Please contact us by email at [1][email address] if you
have any further enquiries.

Regards

The Requests Team
Information Compliance
Cheshire Constabulary HQ
Clemonds Hey
Oakmere Road
Winsford
Cheshire
CW7 2UA

Tel :: 01606 362384

This communication is intended for the addressee(s) only. Please notify
the sender if received in error. Internet email is not to be treated as a
secure means of communication. The Constabulary monitors all Internet and
email activity and requires it is used for official communications only.
Thank you for your co-operation.

References

Visible links
1. mailto:[email address]

Requests, Cheshire Constabulary

3 Atodiad

Dear H Bednarova

 

YOUR REQUEST:

1.       Can I have your records pertaining to sales of personal data from
2019 (01.01.2019) to 2020 (31.12.2020), including trading partners and
money earned from transactions?

 

4.       How many Subject access requests did you receive in the period
2019-2020, broken down by year? What types of personal data did they
typically receive? For example email addresses, home address and telephone
number?

 

5. How many data breaches have you experienced for the past 5 years
(broken down by each year).

OUR RESPONSE:

 

In accordance with section 1(1) (b) of the Act, our response is as
follows:

Question 1
No Information Held, you refer to the sale of personal data by police
forces, it is first important to distinguish between "information is
provided at a cost" (which may include personal data) for a legitimate and
lawful reason.

It is acknowledged by the NPCC that police forces do charge fees for the
provision of certain documentation. In the link below, it is cited that
charges are applied by forces in certain circumstances for providing third
parties with information such as witness statements, interview records and
fingerprints – all of which either are, or include, personal data.
 However, this is not considered "sale" of data.

[1]https://www.npcc.police.uk/documents/fin...

Question 4

 

2019 – 522

2020 – 476

 

With reference to the type of data "typically" received in a SAR. The data
captured within them will be extremely varied. What is "typically"
received is not recorded and this is too broad and non-specific to provide
an answer to, this may impose an exemption if specific information is
requested. 

 

Question 5

2016/17   127

2017/18   125

2018/19   325

2019/20   327

2020/21   289 (up to February 2021)

 

If you are not satisfied with the decision applied in this case I enclose
for your attention a copy of the Constabulary's appeal procedures.

 

Regards

 

 

Sarah Davies

Information Officer

Joint Corporate Services  | Cheshire Constabulary  | Police HQ | Clemonds
Hey | Winsford | Cheshire | CW7 2UA | Phone: 01606 366556 |  Email:
[2][email address]

Visit [3]www.cheshire.police.uk | Follow [4]@cheshirepolice on Twitter |
Like [5]Cheshire Police on Facebook

[6]Joint Corporate Services email sig[7]cid:image001.jpg@01D24FB5.8237DE20

 

This communication is intended for the addressee(s) only. Please notify
the sender if received in error. Internet email is not to be treated as a
secure means of communication. The Constabulary monitors all Internet and
email activity and requires it is used for official communications only.
Thank you for your co-operation.

References

Visible links
1. https://www.npcc.police.uk/documents/fin...
2. mailto:[email address]
3. http://www.cheshire.police.uk/
4. http://www.twitter.com/cheshirepolice
5. http://www.facebook.com/cheshirepolice