ICO SAR code of practice 20170609 Version 1.2
"To avoid personal data about one individual being sent to another, either accidentally or as a result of deception, you need to be satisfied that you know the identity of the requester. You can ask for enough information to judge whether the person making the request is the individual to whom the personal data relates (or a person authorised to make a SAR on their behalf).
The key point is that you must be reasonable about what you ask for. You should not request a lot more information if the identity of the person making the request is obvious to you. This is particularly the case when you have an ongoing relationship with the individual."
If the SAR was made by you they may not release the information unless they obtain prior authorisation from your son anyway!
Has your son decided whether or not to return to the UK any time soon?
"To avoid personal data about one individual being sent to another, either accidentally or as a result of deception, you need to be satisfied that you know the identity of the requester. You can ask for enough information to judge whether the person making the request is the individual to whom the personal data relates (or a person authorised to make a SAR on their behalf).
The key point is that you must be reasonable about what you ask for. You should not request a lot more information if the identity of the person making the request is obvious to you. This is particularly the case when you have an ongoing relationship with the individual."
If the SAR was made by you they may not release the information unless they obtain prior authorisation from your son anyway!
Has your son decided whether or not to return to the UK any time soon?
Comment