Data collecting, storing, sharing or selling. And data breaches

Roedd y cais yn llwyddiannus.

Dear City of London Police,

am making a Freedom of Information request to find out the answers to the below
questions. Please provide your responses in electronic format. Thank you in advance for
your time spent answering them.

Can I have your records pertaining to sales of personal data from 2019 (01.01.2019) to 2020 (31.12.2020), including trading partners and money earned from transactions?

Do you use tracking cookies on your website, and can I have a list of third parties
that you share personal data with?

Have you received any complaints about how you handle personal data? This
includes collecting, storing, sharing or selling, as well as wider processing
practices. Please can I view records pertaining to these complaints for the years 2019 and 2020?

How many Subject access requests did you receive in the period 2019-2020,
broken down by year? What types of personal data did they typically receive? For
example email addresses, home address and telephone number?

How many data breaches have you experienced for the past 5 years (broken down by each year).

Yours faithfully,

Hana Bednarova

FOI, City of London Police

*** Thank you for your email. Please accept this message as acknowledgement that
we have received your email ***



UPDATE - Due to the recent government guidance the Information Access Team will
be working from home. Whilst we have access to emails and telephone calls we
appologise if the current situations leads to delays.


The City of London Police use a case management system for all disclosure
requests including Freedom of Information. Your case will be logged and an
acknowledgement email including reference number will be sent from this
system. (if you have applied for an FOI on line you will receive a
seperate URN but we will allocate you a new URN when we acknowledge your
request from our system, we will still keep record of you first URN).


Freedom of Information


If you email relates to Freedom of Information your request will be
considered in accordance with the provisions of the Freedom of Information
Act 2000.  You will receive a response within the statutory timescale of
20 working days as defined by the Act, subject to the information not
being exempt or containing a reference to a third party.  In some
circumstances we may be unable to achieve this deadline.  If this is
likely you will be informed and given a revised time-scale at the earliest


We normally provide information free of charge but there may be occasions
when it would be appropriate to charge a fee where our costs are
excessive.  In such cases we will advise you prior to processing your


In some cases it may be necessary to transfer your request either in full
or in part to another public authority in order to answer you request as
comprehensively as possible.  Again, you will be informed if this is the


Please see our previously released FOIs on our disclosure log;




Data Protection


If your email relates to advice or a request for information relating to
Family or Civil Court Proceedings, Third Party Data requests, Insurance
requests or advice that falls in line with the Act we will consider your
request under the Data Protection Act 2018. You will receive a response
within an estimated 30 days.


Insurance companies part of the Association of British Insurers need to
supply the request on the appropriate appendix form, client’s signature
consent and fee. Please see our website for further details;




In some cases we may require payment or further information in order for
us to complete the request. In this case we will contact you and advise
before proceeding with the request.


Request for Personal Information (Subject Access)


If your request is for personal information under the Rights of Access of
the Data Protection Act 2018 then we will deal with your request in line
with the Act and you will receive your response within 30 working days.
Subject to any redactions of third party data or data that you are
otherwise not entitled to.


Please be aware that all requests for personal data must be made in
writing with as much detail as possible in order for us to be able to help
us comply with your request.

Requests must also be accompanied with proof of identification and


You can find more information and request form on our website:





If you require a check to be made against your conviction history (PNC
check) this check is carried out by National Police Chiefs'
Council Criminal Records Office (ACRO). This check may also be referred to
as Police Certificates, Certificates of Good Behaviour, PNC Disclosures or
PNC prints.

The City of London Police are unable to process this type of Subject
Access Request and such requests must be sent directly to ACRO.



The City of London Police does not provide disclosures for employment
vetting services. If you require a disclosure for UK employment purposes,
please contact Disclosure Scotland on 08706 096 006. Disclosure Scotland
is a government approved agency that provides suitable reports for
employers showing any relevant convictions.

Request for Information Advice


All other requests or advice including internal matters will be
acknowledged and we aim to respond to your email within 3 working days.


The City of London Police gathers and holds personal information which it
uses for a policing purpose. This includes: Protecting life and property;
Preserving order; Preventing the commission of offences; Bringing
offenders to justice; Any duty or responsibility of the police arising
from common or statute law.


Please see our Privacy Notice -



Please consider the environment before printing my email

dangos adrannau a ddyfynnir


Visible links

David Tustin,

1 Atodiad

  • Attachment

    FOI Response FOI2021 00297.odt

    54K Download

Dear Hana Bednarova,

I am writing in response to your request for information, received 11th

Yours sincerely,