UK Watchdog Fines Care Home Director for Refusal to Answer Subject Access Request
A care home director in Yorkshire was fined 1,100 pounds ($1,500) plus costs for refusing to respond to a subject access request, the U.K. Information Commissioner's Office announced Thursday.
Sign up for a free preview to unlock the rest of this article
Privacy Daily provides accurate coverage of newsworthy developments in data protection legislation, regulation, litigation, and enforcement for privacy professionals responsible for ensuring effective organizational data privacy compliance.
In April 2023, a woman sought personal information about her father from Bridlington Lodge Care Home, the ICO said. She had the authority to seek the information -- which included incident reports, copies of CCTV footage and notes relating to her father's care -- on her father's behalf under a lasting power of attorney.
The ICO found that the director, Jason Blake, had blocked, erased or concealed records held by the care home between April 12 and May 12, 2023, to prevent the information from being released. He didn't explain why his organization refused to respond to the subject access request.
“By ignoring this request for personal information and refusing to provide any explanation, Mr Blake believed he was above the law," said ICO Head of Investigations Andy Curry. "Not only did he dismiss the family’s request, he also tried to avoid scrutiny by asking the ICO to cancel his registration."
All organizations must respond to access requests within one month, and it's a crime to alter, deface, block, erase or conceal information to prevent its disclosure, the watchdog said.