![]() ![]() She said: “When you originally made your request, we determined that we did not consider the information that we held to be your personal information as defined by the Information Commissioner in their guidance of ‘What is Personal Data’, hence our response that the information was not held. ![]() “Within these documents, the only information we hold is your name and email address.” ![]() In a covering letter accompanying the redacted emails, a DWP manager said she had enclosed “all of the documents that DWP Press Office holds for this period. Mishcon says this means that DWP continues to be in “serious infringement” of its GDPR obligations. The Mishcon letter adds: “The upshot of your… response to our client’s request is that he remains completely lacking full awareness of what personal data you process about him, and unable to verify the lawfulness of the processing.” ![]() Mishcon de Reya, which is acting pro bono for DNS, has this week written again to DWP to warn the department that the redacted information it provided “utterly fails” to comply with its legal obligations under the General Data Protection Regulation. One email, on 25 February 2019, probably discusses a news story that DNS published later that week, which reported how the proportion of DWP staff who said they had been victims of disability discrimination at work in the previous 12 months had risen by about 50 per cent in just four years. The timing of another suggests it relates to the safeguarding failures of DWP and its private sector contractors, while another email is likely to relate to DWP’s decision to set up a new serious case panel to examine deaths of claimants linked to the department’s failures. Several of the redacted emails appear to be discussing DNS requests relating to the personal independence payment assessment system. The timing of another, in June 2019, suggests it was discussing a DNS enquiry about a meeting between one of DWP’s director generals and Joy Dove, whose daughter Jodey Whiting had her out-of-work disability benefits stopped for missing a work capability assessment, and took her own life just 15 days later. One was sent shortly before DWP responded to a lengthy investigation by DNS into deaths of disabled benefit claimants that had been linked to the work capability assessment. The content of the emails is almost completely blacked out, other than the occasional mention of Pring’s name and a small number of random words.īut the redacted pages do reveal the dates on which the emails were sent, which provide clues as to the subject of the discussions within the DWP press office. Now, in its latest attempt to hide the content of emails that mentioned Pring and were sent and received by the DWP press office during 2019, the department’s right of access team has handed over 80 pages of redacted emails. Pring has been trying for two years to obtain details of emails written about him by DWP’s communications department.Īnd although the Information Commissioner’s Office has already agreed that DWP’s failure to provide the information is a clear breach of data protection laws, it has repeatedly refused to release the emails. The 80 pages of redacted information were posted to Pring’s previous address after DWP was told by information rights legal experts at solicitors Mishcon de Reya that its ongoing refusal to release the data was a “serious contravention” of its legal obligations. That’s OK though, because I have a feeling most people only have one or two profiles anyways.The Department for Work and Pensions (DWP) has sent 80 pages of emails that have been almost entirely blacked out to Disability News Service (DNS), in a bid to avoid complying with its legal duty to release information about DNS editor John Pring. What this means for you: you’ll have to apply these filters to any profile you create. It might make sense for Google Analytics to move these to the “property” level, because it make sense to have some filters property-wide. People put crazy stuff in form fields, regardless of what you intend for them to put there.īefore we start, I have to point out one downside: all of your defense against PII collection is done at the “profile” level. If you run a site of any sufficient size, you know that this is next to impossible. You will not (and will not allow any third party to) use the Service to track, collect or upload any data that personally identifies an individual (such as a name, email address or billing information), … Did you know that it’s against the Google Analytics Terms of Service to capture email addresses in their system? It is, and so is any other personally identifiable information (PII). ![]()
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |