Data Protection Compliance
Dear Sir/Madam,
I am writing to make a formal request for information under the provisions of the Freedom of Information Act 2000. I kindly request that you provide me with the following information:
1. A copy of your organisation's Records of Processing Activity (ROPA) as defined in Article 30 of the UK General Data Protection Regulation (UK GDPR).
2. A copy of all legitimate interest assessments conducted by your organisation where you rely on Article 6(1)(f) legitimate interests as your lawful basis for processing.
3. A copy of all privacy impact assessments conducted by your organisation.
4. A copy of all data protection impact assessments conducted by your organisation.
5. A copy of all international transfer risk assessments conducted by your organisation.
6. A recent copy of your organisation's data protection compliance assessment using the Information Commissioner's Office (ICO)'s accountability framework template. If you are using your own standards to monitor compliance with the Data Protection 2018, please provide me with copy of it.
7. A copy of your organization's data protection policy.
8. A copy of your organization's subject access request policy, procedures, and processes, including any guidance material such as folder structure, naming conventions, and redaction guides.
9. A copy of your organisation's privacy notices, including but not limited to employees, customers, ministers, special advisors (SPADs), complaints, NEDS, visitors, and CCTV.
10. A copy of your organisation's due diligence questions for vendor management such as independent data controllers or processors.
I understand that under the Freedom of Information Act, you are required to respond within 20 working days. To stay within section 12 - cost limits, I suggest asking your Data Protection Officer for the information. If this is not possible, I suggest a search of your compliance platform and your Microsoft estate for the following search terms (not case sensetive):
1. "records of processing activity" OR "ropa"
2. "legitimate interest assessment" OR "LIA"
3. "privacy impact assessment" OR "privacy impact assessments" OR "PIA"
4. "data protection impact assessment" OR "DPIA"
5. "transfer risk assessment" AND "personal data"
6. "accountability framework"
I would prefer to receive the requested information in electronic format via email.
Should you require any clarification or further details in order to process this request, please do not hesitate to contact me. I would be grateful if you could confirm receipt of this request and provide a reference number for future correspondence.
Thank you for your attention to this matter. I look forward to receiving the requested information within the statutory timeframe.
Yours faithfully,
Jay Bhanji
Information request
Our reference: 17491153
Your reference: [FOI #991449 email]
══════════════════════════════════════════════════════════════════════════
Dear Sir/Madam
Freedom of Information Act 2000
Thank you for your request for information that was received on 15 June
2023.
We are dealing with your request under the Freedom of Information Act
2000 and we aim to send a response by 13 July 2023.
Please note to improve efficiency future requests should be made using the
form on our website here: [1]Make an FOI Request
The Freedom of Information Act 2000 may restrict the release of some or
all of the information you have requested. We will carry out an assessment
and, if any exemptions apply to some or all of the information, then we
might not provide that information to you; we will inform you if this is
the case and advise you of your rights to request an internal review and
to complain to the Information Commissioner's Office.
We will also advise you if we cannot provide you with the information
requested for any other reason together with the reason(s) why and details
of how you may appeal (if appropriate).
Yours faithfully
Barbara Hayden
Senior Support Officer
London Borough of Redbridge
[2]www.redbridge.gov.uk
[3]@RedbridgeLive
[4]www.facebook.com/Redbridge
Save time, go online: [5]www.redbridge.gov.uk
NOTE: Please do not edit the subject line when replying to this email.
LONDON BOROUGH OF REDBRIDGE DISCLAIMER This email contains proprietary
confidential information some or all of which may be legally privileged
and/or subject to the provisions of privacy legislation. It is intended
solely for the addressee. If you are not the intended recipient, an
addressing or transmission error has misdirected this e-mail; you must not
use, disclose, copy, print or disseminate the information contained within
this e-mail. Please notify the author immediately by replying to this
email. Any views expressed in this email are those of the individual
sender, except where the sender specifically states these to be the views
of the London Borough of Redbridge. This email has been scanned for all
viruses and all reasonable precautions have been taken to ensure that no
viruses are present. The London Borough of Redbridge cannot accept
responsibility for any loss or damage arising from the use of this email
or attachments.
References
Visible links
1. https://www.redbridge.gov.uk/have-your-s...
2. https://www.redbridge.gov.uk/
3. https://twitter.com/RedbridgeLive
4. https://www.facebook.com/Redbridge
5. https://www.redbridge.gov.uk/
Dear Jay Banjii
Thank you for your request for information received on 15^th June 2023.
Please find the formal FOI Response Letter attached explaining what
information we have provided and further guidance for you. We have also
provided various attachments for information that that we can release, in
response to your request.
Kind Regards,
Anrul Ullah (Pronouns He/Him) An-Rule Ooh-Lah
Interim Operational Director of IT
London Borough of Redbridge
( 020 8708 7223/07442 514 410
* [1][email address]
+ Lynton House (6^th Floor), 225-259 High St, Ilford, 1G1 1NY
[2]Fostering in Redbridge
[3]Women's safety, this has to stop
LONDON BOROUGH OF REDBRIDGE DISCLAIMER
This email contains proprietary confidential information some or all of
which may be legally privileged and/or subject to the provisions of
privacy legislation. It is intended solely for the addressee.
If you are not the intended recipient, an addressing or transmission error
has misdirected this e-mail; you must not use, disclose, copy, print or
disseminate the information contained within this e-mail.
Please notify the author immediately by replying to this email. Any views
expressed in this email are those of the individual sender, except where
the sender specifically states these to be the views of the London Borough
of Redbridge.
This email has been scanned for all viruses and all reasonable precautions
have been taken to ensure that no viruses are present.
The London Borough of Redbridge cannot accept responsibility for any loss
or damage arising from the use of this email or attachments.
References
Visible links
1. mailto:[email address]
2. https://www.redbridge.gov.uk/adult-and-c...
3. https://www.redbridge.gov.uk/crime-and-p...
Dear Jay Banjii
Thank you for your request for information received on 15^th June 2023.
Please find the formal FOI Response Letter attached explaining what
information we have provided and further guidance for you. We have also
provided various attachments for information that that we can release, in
response to your request.
Kind Regards,
Anrul Ullah (Pronouns He/Him) An-Rule Ooh-Lah
Interim Operational Director of IT
London Borough of Redbridge
( 020 8708 7223/07442 514 410
* [1][email address]
+ Lynton House (6^th Floor), 225-259 High St, Ilford, 1G1 1NY
══════════════════════════════════════════════════════════════════════════
From: [FOI #991449 email]
Sent: 15/06/2023 22:55
To: [Redbridge Borough Council request email]
Subject: Freedom of Information request - Data Protection Compliance
(Attachments:) Email from [FOI #991449 email] -
Freedom of Information request - Data Protection Compliance.txt, Email
(original message) from [FOI #991449 email]
received on 15/06/2023.eml
LONDON BOROUGH OF REDBRIDGE DISCLAIMER This email contains proprietary
confidential information some or all of which may be legally privileged
and/or subject to the provisions of privacy legislation. It is intended
solely for the addressee. If you are not the intended recipient, an
addressing or transmission error has misdirected this e-mail; you must not
use, disclose, copy, print or disseminate the information contained within
this e-mail. Please notify the author immediately by replying to this
email. Any views expressed in this email are those of the individual
sender, except where the sender specifically states these to be the views
of the London Borough of Redbridge. This email has been scanned for all
viruses and all reasonable precautions have been taken to ensure that no
viruses are present. The London Borough of Redbridge cannot accept
responsibility for any loss or damage arising from the use of this email
or attachments.
References
Visible links
1. mailto:[email address]
We work to defend the right to FOI for everyone
Help us protect your right to hold public authorities to account. Donate and support our work.
Donate Now