Handling FOI and EIR Requests For Personal Data
Personal data is the subject of many FOI and EIR requests.
Requestors often ask for email addresses, staff names and other information that is capable of identifying employees, service users and the public.
Such requests require consideration of data protection and privacy legislation alongside the provisions of FOI and EIR.
This advanced workshop will provide delegates with a comprehensive understanding of how to apply S.40 of FOI and Regulation 13 of EIR when responding to requests for personal data and how these overlap with GDPR and the Data Protection Act 2018. Recent ICO and Tribunal decisions will be discussed together with case studies and exercises to give delegates the chance to test their understanding in a supportive training environment.
Key Topics
- Understand the definition of personal data and in particular understand what is meant by 'identifiable' living person
- Be able to identify a data subject access request and understand how to deal with this in the context of a FOI request
- Understand the way in which FOI Section 40 (2) and EIR reg 13 apply in relation to third party personal data
- Have greater confidence in applying the personal data exemptions in FOI S 40 (2) and EIR reg 13
- Know how to draft a Refusal Notice based on FOI S 40(2) and EIR reg 13
Dates & Cost
Online
£449 plus VAT
Classroom
£499 plus VAT
Timings: 10am to 4pm
Course tutors
All our associates are experienced information governance professionals who have been training and advising in this field for many years.

What our clients say about us
I would highly recommend the GDPR Practitioner Course. The Tutor was extremely knowledgeable and gave plenty of chance for group conversation or individual questions. A great course for anyone wanting to expand their knowledge of GDPR and understand putting the principles into practise.
SL, BCH
I would highly recommend the GDPR Practitioner Course. The Tutor was extremely knowledgeable and gave plenty of chance for group conversation or individual questions. A great course for anyone wanting to expand their knowledge of GDPR and understand putting the principles into practise.
SL, BCH
I learned so much! The course was just the right balance of theory and practical, and was very well delivered.
CB, CHAS
The course was very useful as an IG Officer. The trainer was knowledgeable and explained some complex aspects of the legislation using interesting examples and real life scenarios. As a refresher, even with lots of work experience behind me, it was very useful to undertake the Practitioner course. The course materials and handbook are invaluable and I know I will re-use them in conjunction with my usual resources.
NC, Lincolnshire County Council
A very practical and all-encompassing coverage of the UK GDPR provided over 4 days. Although 4 days is not enough time to cover this whole subject in depth, there was just enough covered with further resources and links provided within the sessions to cover all aspects of the GDPR to a level at which I now feel a lot more confident in my role. Thank you, Kirsty!
SW, Norwich University of the Arts
