"enforced subject access requests" become a Criminal Offence - Data Protection Act Section 56
Pending changes to section 56 of the data protection act has significant implications for all businesses and organisations. The expected implementation date for, the currently dormant, Section 56 is December 2014 although this may change. It will make “ enforced subject access requests ” a criminal offence. Enforced subject access requests typically arise the in recruitment checking and vetting process or the supply of restricted products and services. That is to say where any person requires someone to exercise their subject access rights under the Data Protection Act (DPA), by submitting a request for their personal data (for specific protected records) to certain data controllers, and to share the results. Section 56 is designed to stop excessive access to protected records which would not normally be available except to individuals as their own personal data, or to those limited persons legally entitled to make specific searc...