Data Protection and GDPR Level 3 for Managers and Business (VTQ)

64 videos, 2 hours and 55 minutes

Course Content

SARS - Data relating to others

Video 43 of 64
1 min 9 sec
Want to watch this video? Sign up for the course or enter your email below to watch one free video.

Unlock This Video Now for FREE

This video is normally available to paying customers.
You may unlock this video for FREE. Enter your email address for instant access AND to receive ongoing updates and special discounts related to this topic.

Handling Third-Party Data Requests

Consent for Third-Party Data

Obtaining Consent: If the individual's data includes third-party personal data, consent from the third party is necessary before providing the data.

Anonymisation Option: Alternatively, if it's impossible for the requester to identify the third party from the provided information, anonymising the data by removing identifying details is an option.

Exceptions for Employee Requests

Special Case of Employees: In scenarios like an employee requesting data where they recognize a third party (e.g., their line manager), if consent from the third party is not granted, the data cannot be provided.

Requests Made on Behalf of Others

Permission Requirement: If individuals make requests on behalf of others, ensure they have obtained permission from the individual whose data is requested. This could be in the form of written authority or a general power of attorney.

Sensitive Data Handling: If the data is sensitive, consider responding directly to the data subject themselves.