Dear Parliamentary and Health Service Ombudsman,

You have disclosed that you intended to publish some of the information contained in the spreadsheet to which the following extract relates :

"The information was in a spreadsheet published alongside the Ombudsman’s Annual Casework Report 2019. The spreadsheet showed the number of complaints received about each organisation. The information was not visible to readers unless they clicked to reveal hidden tables."

https://www.whatdotheyknow.com/request/m...

I understand that the spreadsheet was labelled: “Complaints about UK government departments and other public organisations” and relates to the year 2018/19:

https://www.whatdotheyknow.com/request/c...

Please provide a copy of all information from the spreadsheet not contained in the hidden tables that you meant to disclose.

Yours faithfully,

D Moore

InformationRights, Parliamentary and Health Service Ombudsman

Thank you for contacting the Parliamentary and Health Service Ombudsman’s
(PHSO) Freedom of Information and Data Protection Team. This is to confirm
we have received your request.

If you have made a request for information under the Freedom of
Information Act 2000 or Environment Information Regulations 2004, we will
respond to your request within 20 working days in accordance with the
statutory time frames set out in both Acts.

If you have made a request for personal information held by the PHSO, your
request will be processed as a Subject Access Request under the provisions
of the Data Protection Act 2018 and will be responded to within one
calendar month in accordance with the statutory time frame set out in the
Act.

We may contact you before this time if we require further clarification or
if we need to extend the time required to complete your request.

For Subject Access Requests, we will send any personal information via
secure email, unless you instruct us differently. To access the
information on the email we send, you will need to sign up to our secure
email service. Details can be found on our website using the link below:
www.ombudsman.org.uk/about-us/being-open...

If you require us to post your personal information to you instead you
will need to inform us of this and confirm your current address as soon as
possible.

Angharad Jackson
Data Protection Officer & Assistant Director Information Assurance
Office of the Parliamentary and Health Service Ombudsman
PHSO CityGate
47-51 Mosley Street
Manchester
M2 3HQ
[email address]

Dear Parliamentary and Health Service Ombudsman,

I was expecting a response by now. I fully understand that you are operating in exceptional circumstances, and I can assure you that I am in no rush to receiver your final response. However, should I receive no satisfactory response by 12 September 2020 I shall have no option but to contact the ICO who proclaim:

'During the coronavirus pandemic you can still report concerns to us about an organisation’s information rights practices.'

https://ico.org.uk/make-a-complaint/

Yours faithfully,

D. Moore

Gadawodd J Roberts anodiad ()

Recent ICO survey: 'Information Rights Strategic Plan:Trust and Confidence':

https://www.oic.wa.gov.au/Materials/Open...

'Q1. How much trust and confidence do you have in companies and organisations storing and using your personal information?

Net low trust and confidence

2019 - 38%

2020 - 28%'

A significant fall.

Gadawodd D. Moore anodiad ()

ICO contacted.

Gadawodd D. Moore anodiad ()

The ICO has contacted the PHSO:

"I have written to the public authority to highlight your complaint. Please let us know if a response has not been received within 10 working days of this letter and we will review the complaint further."

Dear Parliamentary and Health Service Ombudsman,

The ICO have contacted me about this request. I've to get back in touch with them if I get no response from you within 10 working days from the date they contacted you.

You recently responded to a WDTK request of mine not through WDTK but to an email account of mine using Egress:

https://www.whatdotheyknow.com/request/n...

(see my comment dated 25/9/20)

I would like you to respond to this request, and all of my other information requests, via WDTK.

I refer you to the relevant Commissioner's guidance:

“46. This can be ANY (italicised in original) address where the requester may be contacted (including postal or email addresses) and does not have to be their normal residential or business address.

47. It follows that a requester can use a “care of” or PO Box address, or even provide another individual’s email account as their contact address.”

https://ico.org.uk/media/for-organisatio...

It may be that you interpret 'any' to mean any address of your choosing. I, however, would contest such an interpretation. Paragraph 47 clearly indicates that the choice of address to which a response should be sent rests with the requester and not the public authority.

If, however, you have a reason for not responding through WDTK, please first provide me with it via WDTK. Should I accept your reason, then you can send your response to my email account.

Yours faithfully,

D. Moore

InformationRights, Parliamentary and Health Service Ombudsman

Thank you for contacting the Parliamentary and Health Service Ombudsman’s
(PHSO) Freedom of Information and Data Protection Team. This is to confirm
we have received your request.

If you have made a request for information under the Freedom of
Information Act 2000 or Environment Information Regulations 2004, we will
respond to your request within 20 working days in accordance with the
statutory time frames set out in both Acts.

If you have made a request for personal information held by the PHSO, your
request will be processed as a Subject Access Request under the provisions
of the Data Protection Act 2018 and will be responded to within one
calendar month in accordance with the statutory time frame set out in the
Act.

We may contact you before this time if we require further clarification or
if we need to extend the time required to complete your request.

For Subject Access Requests, we will send any personal information via
secure email, unless you instruct us differently. To access the
information on the email we send, you will need to sign up to our secure
email service. Details can be found on our website using the link below:
www.ombudsman.org.uk/about-us/being-open...

If you require us to post your personal information to you instead you
will need to inform us of this and confirm your current address as soon as
possible.

Angharad Jackson
Data Protection Officer & Assistant Director Information Assurance
Office of the Parliamentary and Health Service Ombudsman
PHSO CityGate
47-51 Mosley Street
Manchester
M2 3HQ
[email address]

Gadawodd J Roberts anodiad ()

Latest job advert - looking for someone to beef up cyber security:

"Deputy Data Protection Officer - Information Security
Closing date: 30 October 2020 10:00am
Length of contract: Permanent
Salary: £48,333
Location: Manchester

You will be a cyber security or information security professional, providing confident, expert advice on securing information in the cloud, on premise and across PHSO’s virtual workspaces.

You’ll be able to provide rapid assessments of emerging threats and vulnerabilities, and develop tactical responses to reduce future risk.
Using your knowledge of technologies both legacy and emerging you will find pragmatic and ethical responses to complex issues.

You will embody integrity and resilience as you and your team deliver an exemplary service internally and externally."

https://www.ombudsman.org.uk/about-us/jo...

Gadawodd D. Moore anodiad ()

ICO contacted again.

Gadawodd D. Moore anodiad ()

Swift action on the part of the ICO - DN issued:

"The Commissioner requires the PHSO to take the following steps to ensure compliance with the legislation.

• Issue a substantive response, under the FOIA, to the request."

Gadawodd J Roberts anodiad ()

More muscle being added to the information security team:

'Information Risk and Policy Officer
Closing date
20 November 2020 10:00am
Length of contract
6 Month Fixed Term Contract
Salary
£30,471
Location
Manchester

As an Information Risk and Policy Officer, you will play a critical role in protection PHSO’s information and people.

You will maintain the information and cyber security risk, third party, incident and vulnerability registers to provide the senior information risk group with accurate and consistent status information. 

You will be responsible for ensuring the accuracy and consistency of the information incident and data breach reporting process.'

https://www.ombudsman.org.uk/about-us/jo...

InformationRights, Parliamentary and Health Service Ombudsman

Dear D Moore

Please accept my apologies for the delay in responding to your request.

A copy of the information can now be found on PHSO's website. Please see the link to the document 'Complaints about UK Government Departments and agencies and other public organisations 2018-19' located at the bottom of the page:

https://www.ombudsman.org.uk/publication...

As this information is reasonably accessible to you PHSO does not have to communicate a copy to you directly. This is in effect a refusal under Section 21 of the Freedom of Information Act 2000, although the information has not been withheld.

A copy of this email will be sent to the ICO to show that PHSO has complied with the steps set out in its decision notice.

Right of appeal

If you have any queries about this response, please contact the Information Rights Team. Please remember to quote the reference number above in any future communications. If you are unhappy with the service you have received in relation to your request or wish to request an internal review, please respond to this email and explain why you are dissatisfied.

If you are not content with the outcome of your internal review, you may apply directly to the Information Commissioner’s Office for a decision. Generally, the Commissioner will not make a decision unless you have exhausted the complaints procedure provided by the PHSO. The Information Commissioner’s Office can be contacted at:

The Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

https://ico.org.uk/

Regards,

Freedom of Information/Data Protection Team
Parliamentary and Health Service Ombudsman
E: [email address]
W: www.ombudsman.org.uk

Gadawodd D. Moore anodiad ()

Link to Decision Notice IC-57106-Q5R4:

https://ico.org.uk/media/action-weve-tak...

Gadawodd D. Moore anodiad ()

Gadawodd J Roberts anodiad ()

PACAC Monday 23 November 2020:

https://committees.parliament.uk/oralevi...

'Q21. Jackie Doyle-Price: That is helpful. Sometimes producing lots of material and data in the interests of transparency ends up being less than transparent. Reviewing how you are putting this data out to make it tell a better storyat leastoffersus an opportunity for that kind of review. I am assuming that is the principle behind the delays also in producing the data for 2018-19, which has only beenputon this month, I understand.

Amanda Amroliwala: Sorry, I am not aware of the data you are referring to for 2018-19.

Jackie Doyle-Price: The complaints data for Government Departments for 2018-19. I understand it was published earlier this year but taken down and has only just been uploaded on 10 November.

Amanda Amroliwala: If you recall when we came before the Committee in May, we had just had an issue where a spreadsheet had been uploaded that was associated with that data, I think. We had taken that down and done an investigation, because there was some data that should not have been uploaded at the same time. All of that data has been cleansed and now the report has been loaded back up again.

Q22 Chair: It was personal data that was published, wasn’t it, inadvertently?

Amanda Amroliwala: That is right.'