Subject Access Request Query

[precise1234]

Hello,

Completely new here, so apologies if I've posted in completely the wrong place.

I've received the responses from three SARs from some companies related to my profession. Without giving a long, complicated story, the SAR results reveal that the three companies colluded and worked together to 'shut down' a rather whistleblowing story I had about them. The story had already been picked up by, and reported in the media, but several other news outlets contacted me for more detail.

In order to stop further news coverage, the companies hired a PR company to discredit me - again, the SAR results show this. And it worked - the media backed right off.

Can I now do a SAR on the PR company they hired in order to elicit the communication they engaged in with the media about me? And also the emails between themselves and their clients (the three companies). Or, would emails they made to the media or to their clients about me somehow be immune from being disclosed in an SAR (as someone I know hinted at)? I know they would redact third-party names but, if the content is about me, surely it would constitute personal data as defined by GDRP/ICO...

Many thanks in advance,
Ben

[andrew1]

Hi Ben and welcome to LB.

When I had an issue like this (not whistleblowing), but investigating something which I knew I had a right to, I telephoned the ICO who were extremely helpful in discussing the in's and out's with me and then following-up with a complaint to the organisation concerned on my behalf. I got what I wanted.

The ICO's helpline is manned by some very experienced people and I'd ask them just to get the regulator behind you.

I'm not legal or an expert, but have had quite a lot of fights to obtain data I knew I was entitled to when I knew skullduggery had gone on and you sound like you have a good handle on what you are entitled to too. I think you're on the button and as you say, if it's got any of your data on - you can get it, they might not want to supply it, but with the ICO behind you there's a damned good chance you can get it whether they like it or not and that includes emails between the parties.

The only redactions should be legally privileged data or perhaps something commercially sensitive data which might affect their business, but if solicitors are not involved then transparency will prevail.

I wish you luck - just keep digging deeper and deeper, it pays-off in the end believe me.

[precise1234]

Andrew - thanks so much for your reply.
I hadn't thought of contacting the ICO - but am on to it now - would be great to have them in some way behind this.
'Skullduggery' is such a fabulous word, isn't it!
Thanks again, and great to have found LB.
Ben