Select a region
BWCI Pension Trustees Limited broke data protection law by failing to respond to a data subject access request “within the designated period”.
The Office of the Data Protection Authority (ODPA) investigated a complaint last year. The complainant alleged that BWCI Pension Trustees Ltd failed to respond appropriately.
Section 27 of the Data Protection (Bailiwick of Guernsey) Law, 2017, indicates that a data subject access request must be met within one calendar month.
The investigation revealed that BWCI Pensions Trustees Ltd had breached the law by failing to respond appropriately within that timeframe. Further attempts to resolve the issue failed due to BWCI Pension Trustees Ltd’s lack of engagement.
Pictured: The ODPA found that BWCI Pension Trustees Ltd was not “ill-intentioned” but had flawed processes.
The ODPA subsequently issued a reprimand to BWCI Pension Trustees Ltd.
“The right of access to data relating to ourselves is one of the pillars of the legislation,” said the Bailiwick’s Data Protection Commissioner, Emma Martins.
“All organisations should ensure that they have robust and tested policies and procedures to recognise and respond to such requests.
“Engaging with complaints in a positive and timely manner will also reduce the likelihood of further, more formal action being required. I am confident that the Controller in this case has reflected on the opportunities to learn from and improve in these respects.”
Comments
Comments on this story express the views of the commentator only, not Bailiwick Publishing. We are unable to guarantee the accuracy of any of those comments.