FOI - Subject Access Requests [Nov 2018]

1. What was the annual number of SARs (Subject Access Request) you processed in the last three financial years (2016/17, 2015/16, 2014/15)

2. What were the annual totals (number of SARs) processed, that were responded to beyond the 40 calendar day deadlines?

3. In the last financial year (2016/17) what was the average number of days you took to prepare your response to an SAR (within the 40-calendar day deadline)?

4. In the last financial year (2016/17) what was the duration of the longest response to a single SAR (within the 40-day calendar day deadline)?

5. What is the total number of SARs you are currently processing?

6. Of the total number of SARs currently being processed, how many of these have fallen outside the 40-calendar day deadline?

7. How many people are involved in the processing of a SAR?

 

8. How much Digital Personal Data (“DPD”) do you retain (to the nearest GB/TB?)

9. Currently, what is the oldest piece of DPD you retain?

10. In total, how much data do you store (to the nearest GB/TB)

a. a) on-premise

b. b) in the cloud?

11. To the nearest GB/TB, how big was your email archive for the years 2016/17, 2015/16, 2014/15?

12. Who is the current provider/technology of that archive?

13. What is your data retention policy around personal information?

14. To the nearest GB/TB, how much unstructured data do you hold?

15. What is your process/method for discovering personally identifiable information?