ICO - IC-45844-V2X8
| ICO - IC-45844-V2X8 | |
|---|---|
 | |
| Authority: | ICO (UK) |
| Jurisdiction: | United Kingdom |
| Relevant Law: | Article 5(1)(a) GDPR Article 6(1)(a) GDPR Article 6(1)(f) GDPR 40(2) of the FOIA 40(3A)(3B) of the FOIA |
| Type: | Complaint |
| Outcome: | Upheld |
| Started: | |
| Decided: | 28.08.2020 |
| Published: | 28.08.2020 |
| Fine: | None |
| Parties: | NHS West Sussex Clinical Commissioning Group |
| National Case Number/Name: | IC-45844-V2X8 |
| European Case Law Identifier: | https://ico.org.uk/media/action-weve-taken/decision-notices/2020/2618241/ic-45844-v2x8.pdf |
| Appeal: | n/a |
| Original Language(s): | English |
| Original Source: | Information Commissionner Office (in EN) |
| Initial Contributor: | Mariam Tabatadze |
The ICO rules that there is sufficient legitimate interest in disclosure of the information relating to the job description of the CCG officers commissioning health care and it outweighs the data subjects’ fundamental rights and freedoms.
English Summary
Facts
The complainant has requested information to NHS West Sussex Clinical Commissioning Group (the CCG) relating to the job description of the officers commissioning of continuing health care for patients with Acquired Brain Injury, qualifications that are required fot the role and the standard contract used when commissioning the care.
The CCG has withheld the job description under section 40 on the basis that it is the personal data of the post holder. There were several correspondence exchanges between two parties, in which the CCG did explain that there was only one person holding that post and the disclosure of the requested information would contravene the DP principles.
Dispute
The Commissioner had to decide if the CCG is entitled to withhold the job description under section 40. The Commissioner had to determined whether the requested information constitutes personal data, and if it is, it must establish whether disclosure of that data would breach any of the DP principles.
Holding
The Commissioner’s decision is that the CCG is not entitled to withhold the job description under section 40. After having established that the requested information is personal data, (as there is only one person holding that post and the name of the individual is known) the Commissioner determined if the disclosure of the data would contravene the DP principles.
As always, it considers the following three-part test (Article 6 GDPR) - i) Legitimate interest ii) Necessity and iii) Balancing tests.
The Commissioner has established that there is a legitimate interest in the public understanding the role the CCG plays in providing services to vulnerable members of our society and examining its performance. As for necessity test, the Commissioner considers that there is a greater need to understand who is responsible for the individual elements of the process through which the care was organized and delivered. The provision of the job description would certainly assist the complainant in forming a view on where responsibilities lay and how best to address any issues he had with those services. The Commissioner rules out that the disclosure of the information is necessary for the complainant to pursue his legitimate interests.
Does the legitimate interests of the complainant and the public overrides the data subjects’s interests and fundamental rights and freedoms? What is the impact of the disclosure?
After the careful considerations of all possible impacts of the disclosure, the Commissioner noted that the impact would be very limited as the job description relates to the individual’s professional life and the disclosure is therefore less intrusive than it would be if the requested information related to their personal life. There would be very limited interference with their interests or fundamental rights and freedoms. Based on the above, the Commissioner has determined that there is sufficient legitimate interest to outweigh the data subjects’ fundamental rights and freedom and that there is an Article 6 basis for processing and so the disclosure of the information would be lawful.
In relation to fairness, the Commissioner considered that if the disclosure passes the legitimate interest test for lawful processing, it is highly likely that disclosure will be fair for the same reasons.
Comment
Share your comments here!
Further Resources
Share blogs or news articles here!
English Machine Translation of the Decision
The decision below is a machine translation of the English original. Please refer to the English original for more details.
