Subject access requests- GDPR

The request was successful.

Dear Northern Ireland Council for the Curriculum, Examinations and Assessment,
Please could you kindly take a look at the following questions:

1. How many SARs (not other types of data protection requests) have been made to the authority in the last 12 months?
2. How many SAR requests have gone over a deadline (either the standard 30 day allocation or the extended 90 day allocation for more complicated responses)?
3. How many staff are usually contacted to provide data to contribute to the request?
4. On average how many hours are spent dealing with a SAR?
5. Do you have any software to assist with SAR production and if so, which?
6. Who has budget responsibility over the costs & resources required to respond to the SARs? Please provide
Name:
Title:
Direct Email:
Direct Phone Number:

Thank you very much!

Yours faithfully,

Darren Spence

Data Protection Officer, Northern Ireland Council for the Curriculum, Examinations and Assessment

Dear Darren,

We acknowledge receipt of your email requesting information under the Freedom of Information Act 2000. As per section 10 of the Act, you can expect a response no later than 20 working days from the date of receipt of your request.

There may be a fee payable for this information. This will be considered and you will be informed if a fee is payable. In this event, the fee must be paid before the information is processed and released. The 20-day time limit for responses is suspended until receipt of the payment. Should a fee be payable, we will write to you to inform you that a fee is required and the process for making payment.

For your information, the Act defines a number of exemptions which may prevent the release of the information you have requested. We will assess whether any of the exemption categories apply to your request (as per PART 11 of the Act) and if they do, or if there is a delay due to the application of an exemption we will contact you and keep you informed.

If any further assistance on this matter is required, please do not hesitate to contact us at [E-bost cais CCEA]

Kind regards
Data Protection

show quoted sections

Data Protection Officer, Northern Ireland Council for the Curriculum, Examinations and Assessment

Dear Darren,

 

We are responding to your email dated 7 December 2022 requesting
information under the Freedom of Information Act 2000. 

 

The information you requested together with CCEA's responses is as
follows.

 

1. How many SARs (not other types of data protection requests) have been
made to the authority in the last 12 months?

CCEA Response: CCEA has processed 247 Subject Access Requests (SARs) in
the calendar year 2022 to date.

 

2. How many SAR requests have gone over a deadline (either the standard 30
day allocation or the extended 90 day allocation for more complicated
responses)?

CCEA Response: One of the 247 SARs was processed outside the time limits
due to complexity and data accessibility issues.

 

3. How many staff are usually contacted to provide data to contribute to
the request?

CCEA Response: The vast majority of CCEA SARs are for past examination
results and in these cases, 3 staff members would typically be involved in
the searching process with one member of staff facilitating and
administrating the request.

 

4. On average how many hours are spent dealing with a SAR?

CCEA Response: The vast majority of CCEA SARs are for past examination
results and in these cases, we estimate that an average of 2 hours is
spent in total processing these requests.

 

5. Do you have any software to assist with SAR production and if so,
which?

CCEA Response: No. CCEA engages with requestors via email and any
information issued in responses is attached in pdf format. CCEA also
maintains a detailed SAR Register using MS Excel.

 

6.  Who has budget responsibility over the costs & resources required to
respond to the SARs? Please provide

Name:  David Wilson

Title:     Data Protection Officer

Direct Email: [CCEA request email]

Direct Phone Number: 02890 261282

 

Requesting an internal review

 

If you are dissatisfied with the handling of your request, you have the
right to request an internal review.  Internal review requests should be
submitted within 40 working days of receiving this response and should be
addressed, by email or by post to:

 

Complaints Co-ordinator

CCEA

29 Clarendon Road

Belfast

BT1 3BG

 

or

[email address]. 

 

If you are not content with the outcome of the internal review, you have
the right to apply directly to the Information Commissioner for a
decision.  The Information Commissioner can be contacted at:

 

Information Commissioner's Office

Wycliffe House

Water Lane

Wilmslow

Cheshire SK9 5AF

 

Feedback

 

CCEA is committed to ensuring a high quality of service to its customers.
As such, CCEA wishes to gather customer views on its Request for
Information service and to use that information as a means of improving
this service. We would be grateful if you would complete the following
short questionnaire.  All responses will be treated confidentially. We
will not share the information you provide with any 3rd party.

https://research.ccea.org.uk/index.php/3...

 

The CCEA Privacy Notice explains when and why we collect personal
information, how we use it, the conditions under which we may disclose it
to others and how we keep it secure. The Privacy Notice can be found at:
https://ccea.org.uk/legal/privacy-policy

 

Data Protection Officer

 

 

 

show quoted sections