(8 years, 2 months ago)
Lords ChamberClearly, I am not in a position to comment on a particular case. However, in the context of what is said at paragraph 5.42, one has to remember that there is the further issue of whether it would have been in the public interest to make disclosure. That necessary test would have had to be met before there would have been disclosure, however serious the original breach.
My Lords, I have been listening to the debate and realised that of course people are concerned because they do not know what information is held. Sometimes people get into trouble because something is held on file and they do not know what it is. Only the subject knows what affects them and what does not. To take the example just given, where data may have been gathered by someone who is subsequently fired, that information may have been quite sensitive if revealed to someone in another organisation, and only the individual who was the subject of those unauthorised requests would know that. Therefore, this area bears examination. I am not sure how we should deal with that, but to rely just on the commissioner to know exactly how this would affect everyone would be difficult as well. It is worth thinking about this further.