Breach of the Data Protection Act
The data controller failed to respond to an individual’s subject access request in the prescribed period of 40 days.
Enforcement Notice issued, requiring the data controller to supply the individual with a copy of a document within 35 days of the Notice being issued.
Reason for action
The data controller failed to inform the individual, without undue delay, whether personal data relating to him was being processed by it or on its behalf.
7 February 2012