Outcomes - Selected Case Summaries

Categories

 

The right to access one’s own personal data - Department of Education Services

Decisions | 25 July 2023
Department of Education Services

A member of the public submitted a complaint to the Ombudsman against the Department of Education Services (DES). The complainant submitted a request for data consisting of feedback on her job application to the data controller, but she received no substantive response.  

After investigating this complaint, the Ombudsman issued an enforcement order, finding that the data controller contravened the sixth data protection principle (data subject rights) and section 8 (right to access one’s own personal data) by not responding to the subject access request.

The Ombudsman ordered the DES to provide the complainant with the requested personal data regarding the job application submitted within 5 business days.