Data collecting, storing, sharing or selling. And data breaches

Hana Bednarova made this Rhyddid Gwybodaeth request to Cleveland Police

Automatic anti-spam measures are in place for this older request. Please let us know if a further response is expected or if you are having trouble responding.

Roedd y cais yn llwyddiannus.

Dear Cleveland Police,

am making a Freedom of Information request to find out the answers to the below
questions. Please provide your responses in electronic format. Thank you in advance for
your time spent answering them.

Can I have your records pertaining to sales of personal data from 2019 (01.01.2019) to 2020 (31.12.2020), including trading partners and money earned from transactions?

Do you use tracking cookies on your website, and can I have a list of third parties
that you share personal data with?

Have you received any complaints about how you handle personal data? This
includes collecting, storing, sharing or selling, as well as wider processing
practices. Please can I view records pertaining to these complaints for the years 2019 and 2020?

How many Subject access requests did you receive in the period 2019-2020,
broken down by year? What types of personal data did they typically receive? For
example email addresses, home address and telephone number?

How many data breaches have you experienced for the past 5 years (broken down by each year).

Yours faithfully,

Hana Bednarova

Freedom of Information, Cleveland Police

This mailbox is for Freedom of Information requests only and all other
mail will be deleted unactioned.

 

For Legal please forward your e-mail to
[1][cyfeiriad ebost] and for Subject Access please
check the Subject Access section of the Cleveland Police website under the
heading of ‘Advice and Information’ or forward your e-mail to
[2][cyfeiriad ebost] for all other
enquiries please contact Cleveland Police via 101.

 

References

Visible links
1. mailto:[cyfeiriad ebost]
2. mailto:[cyfeiriad ebost]

Freedom of Information, Cleveland Police

Enquiry ref: 12699-21

I acknowledge receipt of your enquiry received by this office on 11th March.

As set out by the Freedom of Information Act it will be our aim to respond to your request by 13th April. In some cases, however, we may be unable to achieve this deadline and would hope to contact you should this be the case.

However although every effort will be made to ensure a response is provided within statutory deadlines, due to current circumstances delays may be unavoidable. We apologise for any inconvenience and will endeavour to process your request as quickly as is practicable.

Please note the ‘working day’ is defined as any day other than a Saturday, Sunday or a day which is a bank holiday in any part of the United Kingdom. The first reckonable day is the first working day after receipt.

If you have any questions regarding your request please contact this office.

Yours sincerely

Mrs M Johnson
Freedom of Information Decision Maker
Department of Standard & Ethics | 1 Cliffland Way | Hemlington | TS8 9GL

Website | Facebook | Twitter | Instagram | LinkedIn

Public Service | Transparency | Impartiality | Integrity

“Delivering outstanding policing for our communities”

Please do not use social media or email to report crime as we do not monitor these accounts 24/7. Dial 999 in an emergency or visit the contact us section of our website for all reporting options.

dangos adrannau a ddyfynnir

Freedom of Information, Cleveland Police

Dear Ms Bednarova,

Enquiry Reference: 12699 -21

I write in connection with regards to your request received in this office on 11th March. I note you seek the following:

Can I have your records pertaining to sales of personal data from 2019 (01.01.2019) to 2020 (31.12.2020), including trading partners and money earned from transactions?
a) No information held however please see below link on charges for certain documentation.
https://www.npcc.police.uk/documents/fin...

Do you use tracking cookies on your website, and can I have a list of third parties that you share personal data with?
a) Please see below link which offers information on cookies:
https://www.cleveland.police.uk/hyg/cook...
We also have privacy notice:
https://www.cleveland.police.uk/hyg/fpsc...

Have you received any complaints about how you handle personal data? This includes collecting, storing, sharing or selling, as well as wider processing practices. Please can I view records pertaining to these complaints for the years 2019 and 2020?
a) Yes we have had complaints. For anything else we would rely on the following

Cleveland Police can neither confirm nor deny that it holds any other information pertinent to this request as the duty in Section 1(1) (a) of the Freedom of Information Act 2000 does not apply, by virtue of the following exemption:
Section 40(2) Personal Information
This should not be taken as conclusive evidence that any information that would meet your request exists or does not exist.
Section 40 is an absolute exemption, which means that the legislators have identified that harm would be caused by any release. In addition there is no requirement to consider the public interest test.
By way of explanation to you I would point out the following: Under Section 40(2) of The Freedom of Information Act, information is exempt information if it constitutes personal information of which the applicant is not the data subject. In order to be considered exempt personal information, the information must satisfy one of two conditions. It must either be information which would be exempt from disclosure to the data subject under the provisions of the Data Protection Act 2018, or disclosure of the information would contravene any of the Data Protection Principles or cause damage or distress to the data subject.

How many Subject access requests did you receive in the period 2019-2020, broken down by year? What types of personal data did they typically receive? For example email addresses, home address and telephone number?
a) Personal information regarding the requester any third party information is redacted.
2019 – 394
2020 – 325

How many data breaches have you experienced for the past 5 years (broken down by each year).
a) Please note “data breach” covers a wide class of incidents, from internal misaddressing of an email with relatively minor information to the erroneous disclosure into the public domain of sensitive personal information. The coding and classification of incidents has also evolved over time, so earlier years are not directly comparable with later years.
2016 – 20
2017 – 24
2018 – 36
2019 – 31
2020 – 45

The Cleveland Police response to your request is unique and it should be noted that Police Forces do not use generic systems or identical procedures to capture and record data therefore responses from Cleveland Police should not be used as a comparison with any other force response you receive.

If you are not satisfied with this response or any actions taken in dealing with your request you have the right to request an independent internal review of your case under our review procedure. The APP College of Policing guidance states that a request for internal review should be made within 20 working days of the date on this response or 40 working days if extenuating circumstances to account for the delay can be evidenced.

We have made every effort to ensure a response was provided within statutory deadlines, however due to current circumstances delays have been unavoidable. If your response was late we apologise for any inconvenience it may have caused and thank you for your patience. If we can be of any further assistance please do not hesitate to contact this office.

Yours sincerely,

Ms E McGuigan
Freedom of Information Decision Maker
Directorate of Standards and Ethics
Cleveland Community Safety Hub | 1 Cliffland Way | Hemlington | TS8 9GL
E-mail: [email address]

Website | Facebook | Twitter | Instagram | LinkedIn

       
Public Service | Transparency | Impartiality | Integrity

“Delivering outstanding policing for our communities”

Please do not use social media or email to report crime as we do not monitor these accounts 24/7. Dial 999 in an emergency or visit the contact us section of our website for all reporting options.

dangos adrannau a ddyfynnir