Outcomes - Selected Case Summaries
Categories
Public sector entity incurs unreasonable delays in responding to a subject access request
Informal Resolution | 20 July 2022
A public sector data controller did not comply with a subject access request, ignoring it for over 200 days. We tried to resolve this issue informally, but the Ombudsman had to issue an enforcement order requiring the data controller to give a complete and final response to the request for the complainant’s own personal data, and to conduct an internal investigation why such a lengthy delay had occurred.Â
After the enforcement order was issued, the data controller fully complied with the request, and we received an investigation report from the data controller addressing the reasons for the delays.