The Information Commissioner’s Office has issued advice for small business handling requests from individuals for information about themselves

The Information Commissioner’s Office (ICO) has published advice today aimed at small and medium sized firms (SMEs

The advice distinguishes between requests that SMEs can treat as part of normal
business practice and those that should be dealt with formally under the Data Protection Act. It includes information on checking a person’s identity and what
SMEs should do if the information requested includes details about other people.
There are also practical examples explaining information that should not be
released.

A fee of up to £10 can be charged unless the information is a medical or educational record. Where a charge is levied the information must be supplied within 40 calendar days of receiving payment.

This good practice note is part of a series published by the Information
Commissioner’s Office to help explain data protection in simple terms. To download a copy, please go to Good practice note

If you need more information, please contact the Information Commissioner’s press office on 020 7025 7580 or visit the website at: www.ico.gov.uk