0370 270 6000

already registered?

Please sign in with your existing account details.

need to register?

Register to access exclusive content, sign up to receive our updates and personalise your experience on brownejacobson.com.

Privacy statement - Terms and conditions

complaints, investigations and reviews: data protection issues

6 September 2018

Data protection legislation changed on 25 May 2018, with the consequence that the bases on which personal data could be lawfully processed, and the grounds on which personal data could be withheld from the data subject, have been narrowed.

The new legislation, consistent with its renewed focus on the rights and freedoms of data subjects generally, allows subject access requests to be made verbally (although provides that steps can be taken to verify the identity of the requestor), provides that a £10 fee may no longer be charged, and requires a response to be provided within one month (two months if the request is deemed by the controller to be complex). The Data Protection Act 2018 retains many of the exemptions to the right of subject access that were available under the previous legislation, but introduces some important changes in relation to information produced in connection with social work.

Generally, where person A makes a subject access request, and information held about A includes information about person B, the information about B cannot be disclosed unless B has consented to the disclosure or it would be reasonable to disclose the information without B’s consent. These provisions were applied to opinions expressed by B (even in a professional capacity) and used as a reason not to disclose those opinions to the data subject. DPA 2018 removes this protection in relation to health, education and social workers. It imposes an assumption of reasonableness in respect of the personal data of such workers that relates to those persons acting in their official capacity – namely that the disclosure of such data (including expressions of opinion by social workers acting in their official capacity) will be reasonable without consent.

Part 3 of Schedule 3 to DPA 2018 provides a range of exemptions to the right of access that apply in relation to data processed for a variety of specified social work purposes by a variety of individuals/organisation, including where disclosure of the data to the data subject would be likely to prejudice carrying out social work because it would be likely to cause serious harm to the physical or mental health of the data subject or another individual, or where the data subject is under 18, the requestor has parental responsibility for the data subject and the data subject would not have expected it to be disclosed to the requestor or has expressly indicated it should not be so disclosed.

The general trend is therefore an expansion of the right of subject access – the requirement to demonstrate a risk of serious harm is a high hurdle, and the provisions about children emphasise the need to discuss disclosure at the time of assessment/intervention. Care should always be taken when recording information about identifiable individuals and pseudonymised data should be used wherever possible. Such data is still personal data in the hands of the controller but gives rise to a far lower level of risk if lost or otherwise falls into the wrong hands.

focus on...

Legal updates

Legal and regulatory monthly update - September 2019

The latest update covering delegated authority, insurance product development, the senior insurance managers regime, data protection, operational control frameworks, Lloyds market, and horizon scanning.


Legal updates

Kuoni referred to the CJEU by Supreme Court for clarification - possible impact on breach of contract, vicarious liability and assumption of responsibility claims for sexual abuse and assault

We were hoping to be able to give you some interesting insights following the judgment of X v Kuoni Travel Ltd but that will have to wait for another day.


Legal updates

Tips for dealing with Litigants in Person

This article provides some tips to bear in mind when dealing with Litigants in Person and a reminder of a number of pieces of guidance, to assist in-house teams in dealing with Litigants in Person in disputes or court/tribunal proceedings.


Legal updates

Extending the scope of fixed recoverable costs: Ministry of Justice consultation

In March 2019, the Ministry of Justice launched a formal consultation (which came to an end on 6 June 2019) aimed at extending the use of fixed recoverable costs in civil claims.


The content on this page is provided for the purposes of general interest and information. It contains only brief summaries of aspects of the subject matter and does not provide comprehensive statements of the law. It does not constitute legal advice and does not provide a substitute for it.

mailing list sign up

Select which mailings you would like to receive from us.

Sign up