Public rights of access to information

1. Public rights of access to information Grisilda Ponniah, Corporate Information Governance Manager Mary Elliott, FOI Officer Legal & Democratic Services

2. Information & Governance Team

3. Reminder of Legislation FOI/EIR Example of FOI (DP issues) Statistics DPA Contents

4. Freedom of Information Act 2000 –right of access to information held by a public body – respond within 20 working days. Code of practice on records management Environmental Information Regulations 2004 –right of access to environmental information – respond within 20 working days (or 40 working days in certain cases) Data Protection Act 1998 –right of access to your own personal information – respond within 40 calendar days Other – Local Government Act 1972 Audit Commission Act 1998 – 20 working days window once a year to come in inspect and copy background documents (can include Contracts) to Accounts Veolia Case (Waste Contract) 5 July 2010 Legislation

5. Access under FOI/EIR

6. Dr Povey has stated the Council’s commitment to openness and transparency demonstrated by Introduction of webcasting Publishing of spend data over £5,000 Publishing of details of contracts over £50,000 Transparency Agenda

7. Confirm/deny if information is held Respond and supply within legal timescales unless: Not held Vexatious/repeated Exceeds cost limit (18 hours work) (NB does not apply to environmental information) Exemption applies Our duties under FOI/EIR

8. To comply with the DPA, a disclosure of personal data under the FOIA must: • be fair and lawful; • meet one of the conditions in Schedule 2 of the DPA; • in the case of sensitive information (such as information about health or criminal activity) also meet one of the conditions in Schedule 3; and, • take into account the reasonable expectations of the individual. Applying the FOI exemption for third party personal data:the Tribunal’s approach in House of Commons v IC & Leapman, Brooke and Thomas upheld in the High Court

9. The Schedule 2 condition most likely to be relevant is that at paragraph 6: “The processing is necessary for the purposes of legitimate interests pursued by the data controller or by the third party or parties to whom the data are disclosed except where the processing is unwarranted in any particular case by reason of prejudice to the rights and freedoms or legitimate interests of the data subject”. Relevant Schedule 2 Condition

10. In considering the application of this condition to a disclosure under the FOIA, the Tribunal applied a three-stage test: • Is there a legitimate public interest in disclosure? • Is the disclosure necessary for that legitimate public interest? • Is the disclosure nevertheless unwarranted because of an excessive or disproportionate adverse effect on the legitimate interests of the individual(s) concerned? The Approach

11. Volume of requests

12. Volume of requests

13. How we dealt with Requests

14. Breakdown of Refusals

15. Who is asking for information

16. Most popular topics recently Potholes Information about deceased persons Other Senior manager pay and training Council Tax More unusual Meetings with Pagan Groups Complaints about ghosts Feng Shui training What are they asking about

17. Any Questions?

18. Access under DP Act (Subject Access Requests)

19. “Personal Data” - any information relating to an identified or identifiable living individual (data subject) An identifiable person – a person who can be identified, directly or indirectly, in particular by reference to an identification number or to one or more factors specific to his physical, physiological, mental, economic, cultural or social identity What is Personal Data?

20. ICO is regulator – requires notification Various roles as an elected member: member of the council - eg member of a committee – SCC notifies representative of residents of your ward - eg dealing with complaints – SCC notifies representative of a political party - particularly at election time – party notifies Description of the processing activities is placed on a public register of notifications You must comply with data protection principles - framework for the proper handling of personal information Notification to ICO

21. Fairly and lawfully processed Processed for limited purposes Adequate, relevant and not excessive Accurate and up to date Not kept for longer than is necessary Processed in line with your rights Secure Not transferred to other countries without adequate protection 8 Principles of ‘Good Information Handling’

22. Ensure language used in any recorded information is appropriate as it could be made available on request Date stamp all written requests for information as soon as received and pass non routine ones immediately to our team It is a criminal offence to conceal, damage or destroy records after they have been requested No exemption for embarrassment You need to manage your records Points to remember

23. Any Questions?

24. External website – under F for Freedom of Information in the A-Z and D for Data Protection (online forms available to make requests) Email xxx@xxxxxxxx.xxx.xx Room 134 County Hall Mary Elliott (Freedom of Information Officer) 020 8541 7969 Grisilda Ponniah (Corporate Information Governance Manager) 020 8541 9915 Contact Details