Inappropriate processing of personal data
The data controller failed to respond to a subject access request made by the data subject relating to the processing of personal data.
Undertaking issued to ensure that all subject access requests received by the data controller are dealt with in compliance with the provisions contained within Section 7 of the Data Protection Act. Adequate and relevant training is provided to all employees who are engaged in the process of dealing with subject access requests.
Reason for action
The ICO had received a complaint about the data controller’s failure to respond to a subject access request.
9 July 2007