SAR's and the Human Rights Act : LUSENET : Repossession : One Thread

A quote taken from a 'Guide for Lenders' summerising part of the act:

The Right of Access to Data – An individual may make a subject access request to anyone holding information about them. The holder of the information must provide a copy of all information held in respect of that individual and reveal the source and any likely recipients. Some information may be subject to an obligation of confidentiality to a third party but this does not absolve the data controller from an obligation to comply with a subject access request. The controller will need to consider whether, in the circumstances, the third party’s right to confidence outweighs the individual’s right to know. The result of this is that the controller could find they are obliged to disclose information but in doing so they will be in breach of confidentiality obligations.

-- Matt (, December 04, 2000

Moderation questions? read the FAQ