Making a data protection complaint to the ICO

Jt Oakley made this Freedom of Information request to Information Commissioner's Office

This request has been closed to new correspondence from the public body. Contact us if you think it ought be re-opened.

The request was refused by Information Commissioner's Office.

Dear Information Commissioner’s Office,

The purpose of this request is to find out who a member of the public can complain about to the Information Commissioner’s Office over a data protection issue.
:::

A member of the public makes a private purchase via email, plus a signed written contact with small company A - in the expectation that the personal information contained in the emails, will remain with Company A.

Company B then asks Company A to provide the buyers personal information to it.

Company A then provides the information to Company B - without asking the purchaser, if they may do so.

Company B then passes on the buyer's private data to Company C, which starts marketing its products to the member of the public, using the personal information contained in the private emails.

Who should the member of the public complain to the Information Commissioner’s Office on harvesting and disseminating private information - without permission?

Company A, B, or C?

Yours faithfully,

JtOakley

AccessICOinformation, Information Commissioner's Office

Thank you for contacting the Information Commissioner’s Office. We confirm
that we have received your correspondence.

If you have made a request for information held by the ICO we will contact
you as soon as possible if we need any further information to enable us to
answer your request. If we don't need any further information we will
respond to you within our published, and statutory, service levels. For
more information please visit:

[1]https://ico.org.uk/about-the-ico/our-inf...

If you have raised a new information rights concern - we aim to send you
an initial response and case reference number within 30 days.

If you are concerned about the way an organisation is handling your
personal information, we will not usually look into it unless you have
raised it with the organisation first. For more information please see our
webpage ‘raising a concern with an organisation’ (go to our homepage and
follow the link ‘for the public’). You can also call the number below.

If you have requested advice - we aim to respond within 14 days. 

If your correspondence relates to an existing case - we will add it to
your case and consider it on allocation to a case officer.

Copied correspondence - we do not respond to correspondence that has been
copied to us.

For more information about our services, please see our webpage ‘Service
standards and what to expect' (go to our homepage and follow the links for
‘Report a concern’ and ‘Service standards and what to expect'). You can
also call the number below.

For information about what we do with personal data see our [2]privacy
notice.

If there is anything you would like to discuss with us, please call our
helpline on 0303 123 1113.

Yours sincerely

The Information Commissioner’s Office

Our newsletter

Details of how to sign up for our monthly e-newsletter can be found
[3]here.

Twitter

Find us on Twitter [4]here.

 

References

Visible links
1. https://ico.org.uk/about-the-ico/our-inf...
2. https://ico.org.uk/global/privacy-notice/
3. https://ico.org.uk/about-the-ico/news-an...
4. http://www.twitter.com/ICOnews

AccessICOinformation, Information Commissioner's Office

Thank you for contacting the Information Commissioner's Office (ICO) through the whatdotheyknow.com (WDTK) website.

The WDTK website was created to help people request information from public authorities under the Freedom of Information Act (FoIA) and the Environmental Information Regulations (EIRs).

The ICO is the regulator responsible for overseeing information rights legislation. We are also subject to the legislation we oversee.

As a public authority the ICO is subject to the FoIA and EIRs and so if people want to request information we might hold about our work as a public body, they can do this through WDTK.

The correspondence you have sent to us is not a request for information we might hold. It is an enquiry about the legislation we oversee. We provide a range of advice services for organisations and for the public. However, we do not provide these through the WDTK website.

Please visit our website at www.ico.org.uk where you will find a great deal of advice about the legislation we oversee. You can also contact our helpline on 0303 123 1113 where a member of our team will be happy to help you.

If you would like to submit your enquiry in writing you should email it to [email address] . We will respond as quickly as we can. However, as we explain on our website there is currently a high demand for our services and it may take us some weeks to deal with your enquiry.

Please do not reply to this message through the WDTK website. We make no commitment to respond if you do.

Yours sincerely

The Information Commissioner's Office

show quoted sections

Dear AccessICOinformation,

Thank you.

Please could you give me a link to the public advice given by the Information Commissioner’s Office on how to determine which organisation to complain about if there is more than one organisation involved in a complaint.

I’m sure that would help the public to make complaints and lessen the ICO’s work, so it is in the public interest.
Both in terms of the work undertaken by the Information Commissioner’s Office and the fact that the public pays for it.

And surely there must be guidance given on internal files - for employees to determine multiple organisation cases, as the complaints become more complex when multiple organisations are involved.

And employees will need to know how to determine how to approach multiple organisation cases, which surely must be the case for complaints - even if only occasionally.

Yours sincerely,

Jt Oakley

AccessICOinformation, Information Commissioner's Office

Thank you for contacting the Information Commissioner’s Office. We confirm
that we have received your correspondence.

If you have made a request for information held by the ICO we will contact
you as soon as possible if we need any further information to enable us to
answer your request. If we don't need any further information we will
respond to you within our published, and statutory, service levels. For
more information please visit:

[1]https://ico.org.uk/about-the-ico/our-inf...

If you have raised a new information rights concern - we aim to send you
an initial response and case reference number within 30 days.

If you are concerned about the way an organisation is handling your
personal information, we will not usually look into it unless you have
raised it with the organisation first. For more information please see our
webpage ‘raising a concern with an organisation’ (go to our homepage and
follow the link ‘for the public’). You can also call the number below.

If you have requested advice - we aim to respond within 14 days. 

If your correspondence relates to an existing case - we will add it to
your case and consider it on allocation to a case officer.

Copied correspondence - we do not respond to correspondence that has been
copied to us.

For more information about our services, please see our webpage ‘Service
standards and what to expect' (go to our homepage and follow the links for
‘Report a concern’ and ‘Service standards and what to expect'). You can
also call the number below.

For information about what we do with personal data see our [2]privacy
notice.

If there is anything you would like to discuss with us, please call our
helpline on 0303 123 1113.

Yours sincerely

The Information Commissioner’s Office

Our newsletter

Details of how to sign up for our monthly e-newsletter can be found
[3]here.

Twitter

Find us on Twitter [4]here.

 

References

Visible links
1. https://ico.org.uk/about-the-ico/our-inf...
2. https://ico.org.uk/global/privacy-notice/
3. https://ico.org.uk/about-the-ico/news-an...
4. http://www.twitter.com/ICOnews

Jt Oakley left an annotation ()

The request is about how the public can define which organisation to complain about in a confusing scenario, with two or three organisations involved,

Why would the Information Commissioner’s Office NOT want to assist the public in determining how to make a complaint?

Dear Information Commissioner's Office,

Please pass this on to the person who conducts Freedom of Information reviews.

You state:

Please do not reply to this message through the WDTK website. We make no commitment to respond if you do.

Yours sincerely

The Information Commissioner's Office

==

I am writing to request an internal review of Information Commissioner's Office's handling of my FOI request 'Making a data protection complaint to the ICO'.

1. Is the Information Commissioner’s Office formally stating that it no longer replies via Wdtk?
Or is it just singling me out?

2. Is the Information Commissioner’s Office stating that there is Data available answering my request, or not?

3. If so, please provide a link. Because I can’t find anything.,that’s why I made the request,

4. Please review this request on public interest grounds.

I have no idea where I can find the data and I would imagine that a great many of the public would would be unable to as well.

5 if you have an internal explanation of the advice available to Information Commissioner’s Office employees, please provide. As it would seem unlikely that there is no Instruction by the Information Commissioner’s Office to guide employees in the matter.

- Logically because, as a publically funded body, it would be unprofessional and unhelpful not to do so,

A full history of my FOI request and all correspondence is available on the Internet at this address: https://www.whatdotheyknow.com/request/m...

Yours faithfully,

Jt Oakley

Information Access Inbox, Information Commissioner's Office

Thank you for contacting the Information Commissioner’s Office. We confirm
that we have received your correspondence.

If you have made a request for information held by the ICO we will contact
you as soon as possible if we need any further information to enable us to
answer your request. If we don't need any further information we will
respond to you within our published, and statutory, service levels. For
more information please visit:

[1]https://ico.org.uk/about-the-ico/our-inf...

If you have raised a new information rights concern - we aim to send you
an initial response and case reference number within 30 days.

If you are concerned about the way an organisation is handling your
personal information, we will not usually look into it unless you have
raised it with the organisation first. For more information please see our
webpage ‘raising a concern with an organisation’ (go to our homepage and
follow the link ‘for the public’). You can also call the number below.

If you have requested advice - we aim to respond within 14 days. 

If your correspondence relates to an existing case - we will add it to
your case and consider it on allocation to a case officer.

Copied correspondence - we do not respond to correspondence that has been
copied to us.

For more information about our services, please see our webpage ‘Service
standards and what to expect' (go to our homepage and follow the links for
‘Report a concern’ and ‘Service standards and what to expect'). You can
also call the number below.

For information about what we do with personal data see our [2]privacy
notice.

If there is anything you would like to discuss with us, please call our
helpline on 0303 123 1113.

Yours sincerely

The Information Commissioner’s Office

Our newsletter

Details of how to sign up for our monthly e-newsletter can be found
[3]here.

Twitter

Find us on Twitter [4]here.

 

References

Visible links
1. https://ico.org.uk/about-the-ico/our-inf...
2. https://ico.org.uk/global/privacy-notice/
3. https://ico.org.uk/about-the-ico/news-an...
4. http://www.twitter.com/ICOnews

Dear Information Commissioner's Office,

Please pass this on to the person who conducts Freedom of Information reviews.

I am writing to request an internal review of Information Commissioner's Office's handling of my FOI request 'Making a data protection complaint to the ICO'.

No information given.

Is the Information Commissioner’s Office stating that it does not hold a copy of the relevant legislation?

Or internal guidance given to employees - to help decide whether a complaint is justified?

How can caseworkers investigate a complex issue without any guidance?

Either the Information Commissioner’s Office isn't supporting its caseworkers, by giving then no guidance on complex cases with more than one organisation involved , or they are left to make personal interpretations of cases - not based on the Acts concerned.

Please could you state which is the case in your review?

A full history of my FOI request and all correspondence is available on the Internet at this address: https://www.whatdotheyknow.com/request/m...

Yours faithfully,

Jt Oakley

Information Access Inbox, Information Commissioner's Office

Thank you for contacting the Information Commissioner’s Office. We confirm
that we have received your correspondence.

If you have made a request for information held by the ICO we will contact
you as soon as possible if we need any further information to enable us to
answer your request. If we don't need any further information we will
respond to you within our published, and statutory, service levels. For
more information please visit:

[1]https://ico.org.uk/about-the-ico/our-inf...

If you have raised a new information rights concern - we aim to send you
an initial response and case reference number within 30 days.

If you are concerned about the way an organisation is handling your
personal information, we will not usually look into it unless you have
raised it with the organisation first. For more information please see our
webpage ‘raising a concern with an organisation’ (go to our homepage and
follow the link ‘for the public’). You can also call the number below.

If you have requested advice - we aim to respond within 14 days. 

If your correspondence relates to an existing case - we will add it to
your case and consider it on allocation to a case officer.

Copied correspondence - we do not respond to correspondence that has been
copied to us.

For more information about our services, please see our webpage ‘Service
standards and what to expect' (go to our homepage and follow the links for
‘Report a concern’ and ‘Service standards and what to expect'). You can
also call the number below.

For information about what we do with personal data see our [2]privacy
notice.

If there is anything you would like to discuss with us, please call our
helpline on 0303 123 1113.

Yours sincerely

The Information Commissioner’s Office

Our newsletter

Details of how to sign up for our monthly e-newsletter can be found
[3]here.

Twitter

Find us on Twitter [4]here.

 

References

Visible links
1. https://ico.org.uk/about-the-ico/our-inf...
2. https://ico.org.uk/global/privacy-notice/
3. https://ico.org.uk/about-the-ico/news-an...
4. http://www.twitter.com/ICOnews

Information Commissioner's Office

10 April 2019

 

Case Reference Number IRQ0829053

 

Dear J Oakley

Request for Information
 
Further to your request for information to the ICO titled ‘Making a data
protection complaint to the ICO’, we can now respond.
 
We have dealt with your request in accordance with your ‘right to know’
under section 1(1) of the Freedom of Information Act 2000 (FOIA), which
entitles you to be provided with any information ‘held’ by a public
authority, unless an appropriate exemption applies.

To the extent that your further message of March 12 (the deadline is
today, 10 April) is a request for recorded information I can confirm that
we do not hold any information within the scope of this request.
 
Specifically, we do not hold any advice or guidance for the public on how
to determine which organisation to complain about where more than one data
controller is involved.  Nor do we hold any internal advice for the
benefit of ICO staff on how to determine and administer multiple
organisation complaint cases.  
 
If you have specific queries regarding data protection law you should feel
free to raise an enquiry with us directly. As you are aware, this can be
done via email to [1][email address], or you can contact our Helpline
for advice on 0303 123 1113.
 
We have explained to you that the Freedom of information Act entitles
users to request copies of recorded information held by a public authority
unless an appropriate exemption applies, such as that for information
already in the public domain.
 
The WhatDoTheyKnow.com service has been designed to assist individuals
making such requests.
 
Other enquiries regarding our work, such as one regarding data protection
responsibilities of multiple companies, should be made to us directly.
 
I note that this explanation has been provided to you previously. This was
in response to other enquiries that you have attempted to make through
this website.
 
I therefore reiterate the advice we have given you in the past about how
you can contact us should you have an enquiry about the legislation we
regulate.
 
We would therefore be grateful if you would in future send any enquiries
about our work to us directly through the methods previously described,
reserving WDTK exclusively for the requesting of recorded information
under the FOIA.
 
Review Procedure
 
If you are dissatisfied with this response and wish to request a review of
our decision or make a complaint about how your request has been handled
you should reply directly to this email (leaving the reference number in
square brackets intact), write to the Information Access Team at the
address below or email [2][ICO request email].
 
Your request for internal review should be submitted to us within 40
working days of receipt by you of this response.  Any such request
received after this time will only be considered at the discretion of the
Commissioner.
 
If having exhausted the review process you are not content that your
request or review has been dealt with correctly, you have a further right
of appeal to this office in our capacity as the statutory complaint
handler under the legislation.  To make such an application, please write
to our Customer Contact Team at the address given or visit our website if
you wish to make a complaint under either the Freedom of Information Act
or Environmental Information Regulations.
 
A copy of our review procedure can be accessed from our website [3]here.
  
Yours sincerely
 
 
 
 

Antonia Swann
Lead Information Access Officer
Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow,
Cheshire SK9 5AF
T. 0330 414 6894  [4]ico.org.uk  [5]twitter.com/iconews
Please consider the environment before printing this email
For information about what we do with personal data see our [6]privacy
notice

References

Visible links
1. mailto:[email address]
2. mailto:[ICO request email]
3. https://ico.org.uk/media/about-the-ico/p...
4. http://ico.org.uk/
5. https://twitter.com/iconews
6. https://ico.org.uk/global/privacy-notice/

Dear Information Commissioner's Office,

Please pass this on to the person who conducts Freedom of Information reviews.

I am writing to request an internal review of Information Commissioner's Office's handling of my FOI request 'Making a data protection complaint to the ICO

Dear Information Commissioner's Office,

You state:

‘we do not hold any advice or guidance for the public on how
to determine which organisation to complain about where more than one data
controller is involved.

Nor do we hold any internal advice for the
benefit of ICO staff on how to determine and administer multiple
organisation complaint cases’.

===

Then logically, a member of the public cannot receive a fair assessment of a multiple organisational complaint - there being NOTHING on ICO or in caseworker guidance files about multiple organisations, passing private information between themselves, so that caseworkers have clear guidance as to HOW to investigate the problem.

- With the consequence that no complaints cannot further their complaint of maladministration to the PHSO, as there are no procedures in place for caseworkers to apply when investigating multiple organisation cases.

There is therefore no point of the ICO directing me to the PHSO, since the Information Commissioner’s Office does not have any way of determining which organisation ( say in a line of three) would be breaking the law, in its procedures,.

==

The basis of this FOIA is to make plain whether all three organisation involved can be fined.

Or just the first organisation investigated by the Information Commissioner’s Office .

This seems to be a reasonable request and one that an Information Commissioner’s Office lawyer could answer.

So I am shocked that even Information Commissioner’s Office lawyers have NOTHING on file to guide them as to which organisation could be fined for breaking the law,

Logically, there MUST have been cases with more than one organisations involved in illegally passing private information to each other.

Please therefore ask your legal section to confirm that it has NOTHING on file - past cases - that deals with multiple organisation breaching the law - by passing personal data between each other, which would throw any light on which organisation the public should complain about.

A full history of my FOI request and all correspondence is available on the Internet at this address: https://www.whatdotheyknow.com/request/m...

Yours faithfully,

Jt Oakley

Information Access Inbox, Information Commissioner's Office

Thank you for contacting the Information Commissioner’s Office. We confirm
that we have received your correspondence.

If you have made a request for information held by the ICO we will contact
you as soon as possible if we need any further information to enable us to
answer your request. If we don't need any further information we will
respond to you within our published, and statutory, service levels. For
more information please visit:

[1]https://ico.org.uk/about-the-ico/our-inf...

If you have raised a new information rights concern - we aim to send you
an initial response and case reference number within 30 days.

If you are concerned about the way an organisation is handling your
personal information, we will not usually look into it unless you have
raised it with the organisation first. For more information please see our
webpage ‘raising a concern with an organisation’ (go to our homepage and
follow the link ‘for the public’). You can also call the number below.

If you have requested advice - we aim to respond within 14 days. 

If your correspondence relates to an existing case - we will add it to
your case and consider it on allocation to a case officer.

Copied correspondence - we do not respond to correspondence that has been
copied to us.

For more information about our services, please see our webpage ‘Service
standards and what to expect' (go to our homepage and follow the links for
‘Report a concern’ and ‘Service standards and what to expect'). You can
also call the number below.

For information about what we do with personal data see our [2]privacy
notice.

If there is anything you would like to discuss with us, please call our
helpline on 0303 123 1113.

Yours sincerely

The Information Commissioner’s Office

Our newsletter

Details of how to sign up for our monthly e-newsletter can be found
[3]here.

Twitter

Find us on Twitter [4]here.

 

References

Visible links
1. https://ico.org.uk/about-the-ico/our-inf...
2. https://ico.org.uk/global/privacy-notice/
3. https://ico.org.uk/about-the-ico/news-an...
4. http://www.twitter.com/ICOnews

Dear Information Commissioner's Office,

Wdtk states :

Information Commissioner's Office are long overdue.

They have not replied to your FOI request Making a data protection complaint to the ICO, as normally required by law.

Would I now make a complaint to the Information Commissioner’s Office ..about the Information Commissioner’s Office?

Review please

Yours faithfully,

Jt Oakley

Information Commissioner's Office

13 May 2019

 

Case Reference Number RCC0840784

 

Dear Jt Oakley

Review of response to information request

I write further to your email of 14 April 2019 in which you requested a
review of the handling of your request dealt with under the reference
number IRQ0829053.

My name is Sarah Whelan and I am a Senior Information Access Officer. I
can confirm that I have had no prior involvement in the handling of this
request.

Request

Your request of 12 March 2019 read:

“Please could you give me a link to the public advice given by the
Information Commissioner’s Office on how to determine which organisation
to complain about if there is more than one organisation involved in a
complaint. I’m sure that would help the public to make complaints and
lessen the ICO’s work, so it is in the public interest. Both in terms of
the work undertaken by the Information Commissioner’s Office and the fact
that the public pays for it. And surely there must be guidance given on
internal files - for employees to determine multiple organisation cases,
as the complaints become more complex when multiple organisations are
involved. And employees will need to know how to determine how to approach
multiple organisation cases, which surely must be the case for complaints
- even if only occasionally.”

Antonia Swann provided our response on 10 April 2019. Following the
receipt of our response you made a request for review as follows:

“Please pass this on to the person who conducts Freedom of Information
reviews. I am writing to request an internal review of Information
Commissioner's Office's handling of my FOI request 'Making a data
protection complaint to the ICO Dear Information Commissioner's Office,
You state: we do not hold any advice or guidance for the public on how to
determine which organisation to complain about where more than one data
controller is involved. Nor do we hold any internal advice for the benefit
of ICO staff on how to determine and administer multiple organisation
complaint cases. Then logically, a member of the public cannot receive a
fair assessment of a multiple organisational complaint - there being
NOTHING on ICO or in caseworker guidance files about multiple
organisations, passing private information between themselves, so that
caseworkers have clear guidance as to HOW to investigate the problem. -
With the consequence that no complaints cannot further their complaint of
maladministration to the PHSO, as there are no procedures in place for
caseworkers to apply when investigating multiple organisation cases. There
is therefore no point of the ICO directing me to the PHSO, since the
Information Commissioner’s Office does not have any way of determining
which organisation (say in a line of three) would be breaking the law, in
its procedures. The basis of this FOIA is to make plain whether all three
organisation involved can be fined. Or just the first organisation
investigated by the Information Commissioner’s Office. This seems to be a
reasonable request and one that an Information Commissioner’s Office
lawyer could answer. So I am shocked that even Information Commissioner’s
Office lawyers have NOTHING on file to guide them as to which organisation
could be fined for breaking the law, Logically, there MUST have been cases
with more than one organisations involved in illegally passing private
information to each other. Please therefore ask your legal section to
confirm that it has NOTHING on file - past cases - that deals with
multiple organisation breaching the law - by passing personal data between
each other, which would throw any light on which organisation the public
should complain about.”

Our response

The Freedom of Information Act entitles applicants to copies of recorded
information held by public authorities. Mrs Swann advised in her response
that we do not hold any advice or guidance for the public on how to
determine which organisation to complain about where more than one data
controller is involved. Nor do we hold any internal advice for the benefit
of ICO staff on how to determine and administer multiple organisation
complaint cases.

As stated in our service guide:

‘When someone raises a matter they have been unable to resolve with the
organisation concerned, we will decide if we think there is an opportunity
to improve information rights practice in that case or to address a more
systemic concern. We will make this decision in light of the nature of the
concern, our understanding of what has happened, the guidance we have
produced and our experience of the relevant organisation or industry,
among other things.

There are different forms of action we might take. We may simply offer
advice to one or both parties. We may make a formal decision under the
legislation we deal with, or ask an organisation to commit to an action
plan, undertaking or advisory visit. Or we may consider more formal
regulatory action.’

[1]https://ico.org.uk/media/about-the-ico/p...

In line with this approach, concerns raised are assessed on a case by case
basis. Part of the ICO’s role is help you to take steps to address
concerns, this could be in regard to one data controller or multiple data
controllers. Our main aim is to improve the information rights practices
of organisations, where there is an opportunity for us to do so.

I have reviewed our response to your request and the searches completed in
respect of information held in the scope of your request. I consider that
the searches are reasonable and appropriate.

Mrs Swann also provided information about how to submit an enquiry in
regard to data protection queries you have. As advised, these will not be
addressed via WhatDoTheyKnow.com which is a website exclusively for the
purpose of making Freedom of Information requests.

To reiterate, specific queries regarding data protection law can be raised
with us directly via email to to [2][email address], or you can
contact our Helpline for advice on 0303 123 1113.

Having reviewed our response I am satisfied that the response provided to
you fulfils our duties in accordance with Part I of the Freedom of
Information Act 2000. I uphold our response of the 10 April in which you
were advised that no information is held in the scope of your request.

This concludes our internal review into the above information request.

Complaint procedure

If you are dissatisfied with the outcome of this review you can make a
formal complaint with the ICO in its capacity as the regulator of the
Freedom of Information Act 2000. Please follow the link below to submit
your complaint:
[3]https://ico.org.uk/make-a-complaint/

Yours sincerely
 

Sarah Whelan
Senior Information Access Officer
Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow,
Cheshire SK9 5AF
T. 0330 414 6322  F. 01625 524510  [4]ico.org.uk  [5]twitter.com/iconews
Please consider the environment before printing this email
For information about what we do with personal data see our [6]privacy
notice

References

Visible links
1. https://ico.org.uk/media/about-the-ico/p...
2. mailto:[email address]
3. https://ico.org.uk/make-a-complaint/
4. http://ico.org.uk/
5. https://twitter.com/iconews
6. https://ico.org.uk/global/privacy-notice/

Dear Information Commissioner's Office,

Thank you.

A reminder of thIs request:

The purpose of this request is to find out who a member of the public can complain about to the Information Commissioner’s Office over a data protection issue.
:::
A member of the public makes a private purchase via email, plus a signed written contact with small company A - in the expectation that the personal information contained in the emails, will remain with Company A.
Company B then asks Company A to provide the buyers personal information to it.
Company A then provides the information to Company B - without asking the purchaser, if they may do so.
Company B then passes on the buyer's private data to Company C, which starts marketing its products to the member of the public, using the personal information contained in the private emails.
Who should the member of the public complain to the Information Commissioner’s Office on harvesting and disseminating private information - without permission?
Company A, B, or C?

:::

You state:

‘Mrs Swann also provided information about how to submit an enquiry in regard to data protection queries * YOU have.

As advised, * these will not be addressed via WhatDoTheyKnow.com which is a website exclusively for the purpose of making Freedom of Information requests’.

==

- Thank you for your advice, but I am well aware if the work of wdtk and understand the form.

If fact, if you check your records, you will find that I won a court case against the Information Commissioner’s Office .

Your phrase:

‘submit an enquiry in regard to data protection queries YOU have.

1.This is personal. As you seem to be referring to a query that I have NOT made on wdtk, and as I have not incorporated any personal enquiry in this request, and simply asked for data , exactly which ‘data protection enquires’ - that apply to me alone, are you referring to in the request?

Please note : Once again, I am requesting data on a complaints PROCESS which thousands of FOIA requesters must use.

Or is the Information Commissioner’s Office stating that only I, out of a population of ‪46.9‬m UK adults, have problems determining the relationship between companies which pass personal data to each other?

As explained the request is about a hypothetical potential complaint where more then one organisation is involved, as an on- line guide to those who might like to complain but are unsure of which organisation passed their personal data to another.

And that is why A, B and C were used as hypothetical descriptions.

‘THESE will not be addressed...’

2. So could you please enlighten me as to exactly what ‘these’ mystery personal ( * YOU ) requests that you are referring to in your response to the request?

Yours faithfully,

Jt Oakley

Information Commissioner's Office

30 May 2019

 

Case Reference Number RCC0840784

 

Dear J Oakley

Further to your email which we received on 13 May. As previously advised
we do not hold recorded information as requested.

As explained in my review response concerns raised are assessed on a
case by case basis. Individuals can contact the ICO helpline for advice if
they are unsure who to complain about.

I have completed the internal review and upheld the decision made.

There is nothing further I can add on this matter, and if you remain
dissatisfied, I direct you to the steps outlined in my review response.

Yours sincerely
 

Sarah Whelan
Senior Information Access Officer
Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow,
Cheshire SK9 5AF
T. 0330 414 6322  F. 01625 524510  [1]ico.org.uk  [2]twitter.com/iconews
Please consider the environment before printing this email
For information about what we do with personal data see our [3]privacy
notice

References

Visible links
1. http://ico.org.uk/
2. https://twitter.com/iconews
3. https://ico.org.uk/global/privacy-notice/

Dear Information Commissioner's Office,

And what are the directions to employees personning the Helpine, which you state will give advice to a member of the public who phones up?

Yours faithfully,

Jt Oakley

Jt Oakley left an annotation ()

The Information Commissioner’s Office first reduces its response to an individual - me, even after the request specifies that is not the case. It’s a request to increase the understanding of how the Information Commissioner’s Office operates with multiple organisations involved. Some who may never know that personal data has illegally been obtained.

Personally I think this is highly inappropriate to reduce an important issue to a personal basis.

Particularly when the Information Commissioner’s Office seems to be stating that it

- hasn’t a clue how to process chain breaches of the law,

- and if it is faced with a complaint on chain distribution, doesn’t give its employees any guidance as to how they might decide where to start.