C-19-8-448 Subject Access Request to the Department of Employment Affairs and Social Protection
Synopsis: This page tracks the correspondence involved in what should have been a straightforward data subject access request, which the data controller refused to comply with, which in turn led to multiple interactions with the Data Protection Commission and remains unresolved at the date of publication (20th November 2019).
Part 1: Subject Access Request and response from data controller
The Department of Employment Affairs and Social Protection responds to the Subject Access Request within the statutory thirty day period, refusing to release the personal data requested.
Part 2: Complaint to the DPC regarding the response to the Subject Access Request
Part 3: Continued correspondence with the DPC
Part 4: Continued correspondence with the DPC
The DPC replies on the 29th August, restating its position.
Part 5: Continued correspondence with the DPC
A follow-up email is sent to the DPC.
Conclusion
20th November 2019
From start to the date of publication this straightforward Subject Access Request has taken 129 days, over four times the 30 days provided for in the GDPR. It is not resolved, nor is the complaint process resolved.
On the data subject’s part it has involved multiple interactions with the Data Protection Commissioner.
Despite all of this effort the access request has still not been completed and the personal data has not been released.
Topics
Data Protection Fundamentals (basics, definitions and more …)
Your Rights (all your data protection rights: access, information, rectification and more …)
In More Detail (explorations and explanations of data protection concepts …)
Keeping Track (tracking Subject Access Requests and complaints to Supervisory Authorities …)