Skip to Main content

Search results for ''...


Sorry, there were no results

Get In Touch

By submitting an enquiry through 'get in touch' your data will only be used to contact you regarding your enquiry. If you would like to receive newsletters from Thomson Snell & Passmore please use the separate form below.

Newsletter Sign Up

I would like to receive newsletters, event invitations and publications from Thomson Snell & Passmore by email on the following topics (tick all those that apply) and consent for my data to be processed for this purpose.

We respect your privacy and want news to be relevant. To either, click here or update your preferences by emailing us at info@ts-p.co.uk. Your personal data shall be treated in accordance with our & .

Get In Touch

By submitting an enquiry through 'get in touch' your data will only be used to contact you regarding your enquiry. If you would like to receive newsletters from Thomson Snell & Passmore please use the separate form below.

Newsletter Sign Up

I would like to receive newsletters, event invitations and publications from Thomson Snell & Passmore by email on the following topics (tick all those that apply) and consent for my data to be processed for this purpose.

We respect your privacy and want news to be relevant. To either, click here or update your preferences by emailing us at info@ts-p.co.uk. Your personal data shall be treated in accordance with our & .

  • Overview

    Nick Hobden (Partner and Head of Employment), and Alexander Millward (Legal Executive) have recently assisted an independent faith school in relation to a number of personal data requests, including a Data Subject Access Request (DSAR) and request to cease processing of personal data, made by the parents of one of their ex-learners.

    Through the team’s experience in the Education sector and DSARs we were able to assist the school throughout the process which included advice on the remit of the school’s searches for personal data, how it should be organised and redaction of other people’s personal data.

    The team initially advised on the fact that the request had been made on behalf of the ex-learner who had capacity to understand their own personal data rights.  To avoid breaching the individual’s personal data, the team worked with the school to draft an initial response which outlined the above and requested proof of authority from the ex-learner that their parents could act on their behalf and receive their personal data.  In the light of the longevity of the ex-learner being with the school and the initial review of personal data, which produced a huge volume of documents (involving  over 230 email inboxes), a request was made to narrow the scope of the DSAR.  

    The school received a positive proof of authority, but the scope of the DSAR remained very wide.  Working with the school, the team drafted a further letter that documented the above and stated that the school would need a further two months to comply with the DSAR and request to cease processing of the ex-learners personal data.

    Once the school had collated all of the documentation that contained the ex-learner’s personal data, they narrowed down the information into sections and, with a view to saving on costs, redacted the documents which came to roughly seven lever arch files.  The team conducted a very light touch approach in reviewing some of the documentation to ensure it was redacted and organised in an appropriate manner. 

    During the DSAR, the ex-learner’s parents lodged a complaint threatening legal claims against the school. Douglas Skilton, partner in our Dispute Resolution team, advised on the complaint issues and helped with the preparation of a suitable response. It was important to ensure that the response addressed not only the threated legal claims, but that it was consistent with and supported the correspondence which had been prepared in relation to the DSAR.    

    Once the document review was complete, the team assisted with drafting of a covering letter which outlined the DSAR and the school’s cessation of processing the ex-learner’s personal data (albeit with exemptions).  

    By working together, the firm and the school were able to complete what was a very administratively demanding DSAR and complaint in time and at an agreed cost.  We are pleased to say the matter did not need to be referred to the ICO.

  • Related Services

    Education

    Our specialist education team is here to support schools and colleges, and our experience shows that each school is different, so a one size fits all approach is not suitable.

    Data protection

    Data protection and privacy law is a complex and fast-changing area with international differences adding an extra layer of complexity. We help businesses of all sizes and across many sectors use and exploit data while remaining compliant with data protection legislation.

    General Data Protection Regulation (GDPR)

    The General Data Protection Regulation (GDPR) came into effect in the UK on 25 May 2018, strengthening existing legislation and creating new requirements for companies who control or process personal data.

Get In Touch

By submitting an enquiry through 'get in touch' your data will only be used to contact you regarding your enquiry. If you would like to receive newsletters from Thomson Snell & Passmore please use the separate form below.

Newsletter Sign Up

I would like to receive newsletters, event invitations and publications from Thomson Snell & Passmore by email on the following topics (tick all those that apply) and consent for my data to be processed for this purpose.

We respect your privacy and want news to be relevant. To either, click here or update your preferences by emailing us at info@ts-p.co.uk. Your personal data shall be treated in accordance with our & .

^
Jargon Buster