Want to make creations as awesome as this one?

More creations to inspire you

Transcript

S.A.R.

FOI and SAR

A quick Refresher on

Freedom of Information and Subject Access Requests

F.O.I.

Click the below options to find out more...

FOI

Freedom of Information

Click the stars to learn more...

Let's have a look at some examples and see if you can identify an FOI request.

SAR

Subject Access Request

Click the stars to learn more...

Let's have a look at some examples and see if you can identify a SAR.

  • Number of cameras operated by TfL​
  • Locations of cameras operated by TfL​
  • Amount of PCN’s issued by TfL​
  • Revenue generated from PCN’s​
  • Training and qualifications of camera operators

Examples:

Subject Access Request

A Subject Access Request (SAR) or Right of Access as it is referred to in GDPR, is a request for information about an individual by said individual or by an approved third party. TfL has one calendar month to respond to any such request and could be fined as much as £17.5 million if the response is inadequate, late or missed.

  • Recordings of telephone calls​
  • Copies of correspondence​
  • Notes from Taranto​
  • Any data that relates to said individual​
  • The only real restriction is where the data requested could infringe on the GDPR rights of another individual, or is in breach of any law or national security.

Examples:

Can you see an FOI request in this example?

Please can you advise as to whether existing LEZ details have been used to collect 'compliance data' for the 'expansion' and whether this is permitted within their current Home Office Approval, and which roads these cameras are located on. Please can you also advise whether 'new ANPR cameras' have also been used for 'compliance data' and 'other purposes' and whether that is their 'home office approved use' ? Also which roads those cameras are located on. Please bear in mind The Home Office and secretary of state cautioned as to whether the approvals for the current ULEZ zone were 'appropriate' and may breach GDPR conditions.

Well done!The customer requested to know the locations of the cameras in a certain area, also how information has been used, which is information that is available in the public domain.

Not Correct.The customer requested to know the locations of the cameras in a certain area, also how information has been used, which is information that is available in the public domain.

Can you see an SAR request in this example?

This paragraph is ready to hold stunning creativity, experiences and stories.

Well done!The customer requested to know the locations of the cameras in that area, which is information that is available in the public domain.

Not Correct.The customer requested to know the locations of the cameras in that area, which is information that is available in the public domain.

Can you see an FOI request in this example?

This paragraph is ready to hold stunning creativity, experiences and stories.

Well done!The customer requested to know the locations of the cameras in that area, which is information that is available in the public domain.

Not Correct.The customer requested to know the locations of the cameras in that area, which is information that is available in the public domain.

An FOI relates to information that should be available to the public domain and relates to anything that is not based around individuals, or classed as sensitive.

Did you hear an SAR request in this example?

Well done!The customer wanted copies of recordings of phone calls she made which may contain her address.

Not Correct.The customer wanted copies of recordings of phone calls she made which may contain her address.

What do you need to look out for?​

FOI’s are generally quite easy to spot and are quite often sent as part of a Representation or Enquiry.​ There are websites that will tell people what to ask for and they are sometimes used to try and make life difficult for TfL, in the hope that a PCN will be cancelled.​ However; TfL are fully equipped to respond to any request and actually publish a lot of the requested information on their website already.

Can you see an SAR request in this example?

Thank you for your email. I note from the contents on this email that you failed to address the question I raised in the first place. I have specifically asked you, to explain how and why the same vehicle with the registration number XO55 ZEDD can be ULEZ compliant, and again the very same vehicle now under LM14 ZZD, be non-ULEZ compliant. The above requires an immediate answer and not an evasive response. I would also like that you treat this letter as an official subject access request on all the data held for both of the above registration numbers for the same vehicle.

Not Correct.The customer requested to have a copy of all the information relating to their own vehicle.

What do you need to look out for?​

SAR’s do not have to come in any particular format, so they can sometimes be a little harder to spot.​ They tend to be buried in a Representation or Enquiry and they can be a little more vague.​ As each request can be very specific, TfL need to be given as much notice as possible to deal with them.​ It is vital that we pick these up as soon as they are received.

Freedom of Information

Freedom of Information (FOI) is an act that allows the public to access information held by public authorities. TfL are legally obligated to respond to any FOI request within 20 working days.

As an SAR is about an individual, only information relating to that individual can be requested.​

Did you hear an FOI request in this example?

Well done!The customer requested to know the locations of the cameras in that area, which is information that is available in the public domain.

Not Correct.The customer requested to know the locations of the cameras in that area, which is information that is available in the public domain.