Merseyside Fire & Rescue
Authority Headquarters
Strategy and Performance
Bridle Road
Bootle
Merseyside
L30 4YD
Mr Tim Wells
Telephone: 0151 296 4000
(Calls may be recorded)
Debbie Appleton 0151 296 4402
Sue Coker 0151 296 4425
Web Site:
www.merseyfire.gov.uk
Date: 3 February 2020
Your Ref:
Our Ref: FOI/07/2020
Dear Mr Wells
FREEDOM OF INFORMATION ACT 2000 - INFORMATION REQUEST
You requested the following information:
1. Please can you send me a copy of the current subject access request acknowledgment AND
response letter that you use
2. A copy of the last 5 DPIAS completed
3. A copy of any internal mandatory information governance training that you give to staff which
was written in the last 2 years including presentation slides and videos and any other media
4. A copy of any instructions given to staff members to reduce data security breaches, for example
double checking work
5. A copy of any policies implemented in the last 2 years within the organisation to help reduce
the environmental impact that the organisation has?
6. Please can I have a copy of the risk rating that you use to evaluate data security incidents?
Response
1. Please see attached
2. Article 35(1) of the General Data Protection Regulation states that an organisation
must do a DPIA where a type of processing is
likely to result in a high risk to
the rights and freedoms of individuals. MFRA used the Information Commissioner’s
DPIA checklist to help us establish whether any of our processing of personal data
was likely to result in a high risk and found that it was not. Therefore, we do not
hold any documents that fall within the definition of a DPIA.
3. MFRA uses a system called LearnPro where our course material in relation to
Information Governance, is stored and accessed by trainees. Unfortunately, it is in
a format that we are not able to export from. If you would like to view the
materials on the system, please feel free to contact us for further information.
Please note that the current training course material is soon to be replaced by a
new course.
4. Service Instruction SI 0435 and Policy STRPOL09 Information Governance and
Security Policy attached.
5. Policy ASSPOL01 Environmental Policy and Property Asset Management Plan
attached.
W:\Freedom of Information\Freedom of Information\FOI-EIR Requests 2020\Wells Tim FOI07\FOI06 Provide
Information.doc
6. We have taken your question to mean Data Protection Act/GDPR incidents. Our
Data Protection Officer is currently unavailable, therefore this information cannot
be confirmed, however we believe that the evaluation of data security incidents is
dealt with on a case by case basis.
If you have any queries or concerns then please do not hesitate to contact the
Director of Strategy and Performance on the above numbers.
If you are dissatisfied with the handling of your request please contact the Information
Management Officer, Merseyside Fire and Rescue Authority Headquarters, Bridle Road,
Bootle, Merseyside, L30 4YD, email
xxxxxxx@xxxxxxxxxx.xxx.xx. You can also contact the Information Commissioner at:
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Telephone: 0303 123 1113
http://www.ico.org.uk
Yours sincerely
Sue Coker
Information Management Officer
W:\Freedom of Information\Freedom of Information\FOI-EIR Requests 2020\Wells Tim FOI07\FOI06 Provide
Information.doc