I confirm that Ordnance Survey does hold some of the information you have requested. Where the information is not held or exempt from disclosure this is stated. Taking each request in turn, I confirm the following:
1. How many SARs (not other types of data protection requests) have been made to the organisation in the last 12 months?
Information held. OS has received 5 SARs since 12 December 2021
2. How many SAR requests have gone over a deadline (either the standard 30 day allocation or the extended 90 day allocation for more complicated responses)?
Information held. Of the 5 SAR requests I confirm that none have exceeded their deadlines.
3. How many staff are usually contacted to provide data to contribute to the request?
Information held. On average 2 additional members of staff are contacted to contribute to each request.
4. On average how many hours are spent dealing with a SAR?
Information not held. We do not keep a record of this information; therefore, we are not able to calculate it.
5. Do you have any software to assist with SAR production and if so, which?
Information held. I confirm the only software used to assist with SAR production is Adobe Acrobat.
6. Who has budget responsibility over the costs & resources required to respond to the SARs?
I confirm we hold the information requested; however, we consider the name, title, direct email and phone number of the person responsible for the budget in relation to SARs to be exempt from disclosure under section 40(2) (personal information) of the FOI Act, as the information constitutes personal data.
Exempt information under section 40(2) (personal information)
Section 40(2) provides that personal data is exempt information if one of the conditions set out in section 40(3) is satisfied. In our view, disclosure of this information would breach the data protection principles contained in the General Data Protection Regulations and Data Protection Act 2018
In reaching this decision, we have particularly considered:
- the reasonable expectations of the employees: given their positions, Ordnance Survey considered that none of the individuals would have a reasonable expectation that their personal data would be disclosed;
- the consequences of disclosure; and
- any legitimate public interest in disclosure.
Section 40(2) is an absolute exemption and therefore not subject to the public interest test.