ICO Address Police Breaches of the Law on GDPR

Police forces are notoriously bad at responding to subject access requests (those are requests for your own personal data) as well as requests for data overall from the force, especially if the request for access is made by the public.

The Information Commissioner’s Office has recently published a report (link seen below) outlining just what an absolute catastrophe police responses to these requests are.

Click to access timeliness-of-responses-to-information-access-requests.pdf

As ever with such a report the real eye-opener are the recommendations made by ICO. In this instance these are nine points which show how UK police forces are failing to deal with data access requests in anything like an efficient and professional way. Often this is because the purpose of data access legislation clashes with police’s wish to keep information regarding errors in procedure and process wholly secret.

Title page of ICO’s report.

This report will cause consternation in particular at failing Humberside Police, a force subject to many eye-watering fines from ICO in the past for failures to comply with the law on data access by the public. The recommendations ICO suggest will likely be impossible for the force to implement.

West Yorkshire Police – as expected one of the forces most likely to break the law to try to avoid the production of data – said at a meeting convened by their Police and Crime Commissioner recently that they would be looking at increasing the staffing in the Information Management Department in the next year (budget permitting) to cope with the demands made upon it. “Looking at” and “budget permitting” is another way of saying that nothing will be done to address the problem.


Leave a comment

Design a site like this with WordPress.com
Get started