The competing demands of Freedom of Information and Data Protection legislation in the UK present challenges for all public bodies involved in collecting, holding and disclosing personal information.

Understanding the interface between the Freedom of Information Act 2000 (and the Environmental Information Regulations 2004 (EIR)) and the Data Protection Act 1998 is essential for all those who have FOI and DP compliance roles in relation to public sector employees, clients and customers.

This Workshop explains the key principles underlying the differences between these important laws, including when personal data should and should not be released in response to subject access requests and FOI/EIR requests.

It will include:

• Determining what is personal data: the latest guidance from the Information Commissioner and Article 29 Working Party on the concept of personal data, as well as the remaining guidance post the Durant case
• Knowing whether a request should be dealt with under the DPA or the FOIA (or EIR); the interpretation and practical application of section 40, FOIA
• The legal principles governing access to third party personal data
• Applying the Data Protection Principles
• Applying relevant exemptions
• Disclosing staff information to outside third parties
• Analysing the practical implications of key decisions of the Information Commissioner and Tribunal: e.g. Corporate Officer of House of Commons v IC and Norman Baker MP (interests of data subject no longer paramount where a public official) and Corby, Calderdale, City of York and George Eliot Hospital NHS Trust (disclosure of salary details or departure packages of senior staff)
• Disclosing third party data of professionals in the fields of health, education and social work

This Workshop enables delegates to understand how to manage requests for information, and to achieve best practice within their organisation.

Topics covered include:

• An overview of the Data Protection Act and FOI provisions on access to personal data and third party personal data
• The definition of 'personal data' and recent developments
• How to classify requests for personal data and third party personal data
• The interface between the DPA, the FOI Act and EIR
• Comparing timescales, fees and other practical aspects of dealing with requests
• Managing requests from within your organisation (e.g. from employees), and from outside it
• Relevant Commissioner and Tribunal decisions including Corporate Officer of House of Commons v IC and Norman Baker MP, and Corby, Calderdale, City of York and George Eliot Hospital NHS Trust cases

PDP hosts professional Conferences in the areas of privacy, data protection, freedom of information and corporate investigations.

The speakers are the leading experts in their fields, and delegates receive invaluable practical advice.

Many events have Workshops, where the delegates have the opportunity to work through practical scenarios and to get hands-on experience.

Please see our website for our upcoming Conferences:

PDP Conferences