Department of Health and Social Care

What happened

The ICO held that the Department of Health and Social Care (DHSC) was entitled to withhold disclosing one name on a document on the grounds that there was no lawful basis for its disclosure under Article 6(1)(f) GDPR and therefore 'processing' the personal data by disclosing the name would breach Article 5(1)(a). Following this line of reasoning, the ICO decided that the DHSC was entitled to rely on Section 40(2) and Section 40(3A) of the Freedom of Information Act to prevent disclosing the name.

Summary from GDPRhub (noyb), written by its volunteers, not by Fino. CC BY-NC-SA 4.0.

Rules involved

• Art. 5Principles relating to processing of personal data5(1)(a)Read →
• Art. 6Lawfulness of processing6(1)(f)Read →

• Data principles
• Unlawful processing