Data Protection Act 2018 compliance
Dear Sir/Madam,
I am writing to make a formal request for information under the provisions of the Freedom of Information Act 2000. I kindly request that you provide me with the following information:
1. A copy of your organisation's Records of Processing Activity (ROPA) as defined in Article 30 of the UK General Data Protection Regulation (UK GDPR).
2. A copy of all legitimate interest assessments conducted by your organisation where you rely on Article 6(1)(f) legitimate interests as your lawful basis for processing.
3. A copy of all privacy impact assessments conducted by your organisation.
4. A copy of all data protection impact assessments conducted by your organisation.
5. A copy of all international transfer risk assessments conducted by your organisation.
6. A recent copy of your organisation's data protection compliance assessment using the Information Commissioner's Office (ICO)'s accountability framework template. If you are using your own standards to monitor compliance with the Data Protection 2018, please provide me with copy of it.
7. A copy of your organization's data protection policy.
8. A copy of your organization's subject access request policy, procedures, and processes, including any guidance material such as folder structure, naming conventions, and redaction guides.
9. A copy of your organisation's privacy notices, including but not limited to employees, customers, ministers, special advisors (SPADs), complaints, NEDS, visitors, and CCTV.
10. A copy of your organisation's due diligence questions for vendor management such as independent data controllers or processors.
I understand that under the Freedom of Information Act, you are required to respond within 20 working days. To stay within section 12 - cost limits, I suggest asking your Data Protection Officer for the information. If this is not possible, I suggest a search of your compliance platform and your Microsoft estate for the following search terms (not case sensetive):
1. "records of processing activity" OR "ropa"
2. "legitimate interest assessment" OR "LIA"
3. "privacy impact assessment" OR "privacy impact assessments" OR "PIA"
4. "data protection impact assessment" OR "DPIA"
5. "transfer risk assessment" AND "personal data"
6. "accountability framework"
I would prefer to receive the requested information in electronic format via email.
Should you require any clarification or further details in order to process this request, please do not hesitate to contact me. I would be grateful if you could confirm receipt of this request and provide a reference number for future correspondence.
Thank you for your attention to this matter. I look forward to receiving the requested information within the statutory timeframe.
Yours faithfully,
Jay Bhanji
Dear Sir,
With reference to your FOI request, please see attached response.
Regards
DoJ Records & Information Team
Good Afternoon
We wrote to you on 06/07/23, advising that an extension was required for some parts of your request. 'These remain under consideration and require an extension for the completion of public interest tests. We will provide a response to you by 10 August 2023'.
Due to the numbers of DPIAs involved a further extension is now required and a response will be with you by 08/09/23.
DOJ Information Team
Dear Sir,
With reference to your FOI request, please see attached a follow up
response to our partial response of 6 July 2023.
Regards
DoJ Records & Information Team
Dear Mr. Bhanji
SUBJECT: Freedom of Information Request
Please find attached our letter of 11 September for your attention
Regards
Information Access
Records and Information Management Branch | Northern Ireland Courts and
Tribunals Service | Department of Justice
Level 2 | Laganside House | 23-27 Oxford Street | Belfast | BT1 3LA
[email NICTS Information Access] [1][email address]
[2]A logo with text on it Description automatically generated
References
Visible links
1. mailto:[email address]
2. https://www.justice-ni.gov.uk/publicatio...
Please see attached, partial response from the Youth Justice Agency to
your Freedom of Information request to the Department of Justice (23\45).
We work to defend the right to FOI for everyone
Help us protect your right to hold public authorities to account. Donate and support our work.
Donate Now