Data Protection and Freedom of
Information
2.10 The Data Protection
Act 1998 was extended to both Houses of Parliament from January
2005. The Clerk of the Parliaments has the role of data controller
in relation to the processing of personal data by or on behalf
of the House of Lords. All staff must follow the House's Data
Protection policy and procedures when handling personal data in
the course of their employment.
2.11 The Data Protection
Policy Statement is printed at Appendix K. Procedures and other
guidance are available on the intranet.
2.12 Staff should be aware
that it is a criminal offence unlawfully to obtain or disclose
personal data without the consent of the data controller.
2.13 Under the Data Protection
Act 1998 staff have subject access rights to personal data held
electronically and on paper. Those wishing to exercise a subject
access right should write to the Human Resources Office with their
request. A response time of 40 calendar days is allowed for the
request.
2.14 The Freedom of Information
Act 2000 gives a general right of access to information held by
public authorities (including the House of Lords), sets out exemptions
from that right and places a number of obligations on public authorities.
Guidance on responding to requests received by the House is available
on the intranet and from the House's Freedom of Information Officer.
2.15. Staff should be
aware of the Freedom of Information and Data Protection implications
of the House of Lords' policy on the disclosure of official information,
privilege and confidentiality as set out in Chapter 12, paragraphs
12.11-12.15. For more information please visit the Publication
Scheme on the Intranet.