Disclosure logs will be necessary because:

• Subject access requests will have to indicate to whom information has been disclosed
• If the information is incorrect the third party will need to be notified to correct the error.
• A data subject can issue a disclose statement requiring a log of disclosures.

Disclosures to Police

Disclosure for the prevention of crime:

• May be disclosed when needed urgently for prevention or detection of a crime or the apprehension or prosecution of offenders
• Should only be for an individual
• Not group data - eg tenants of a block of flats
• Police requesting data should supply a form:
  
       Police Declaration WA170
  
  as agreed between the City and West Midlands Police.

Subject Access Requests

Individuals are entitled to have access to information held about themselves and where appropriate to have it corrected or deleted:

• On making a written request to a data controller you are entitled to be supplied with a copy of any personal data held about yourself.
• The data controller may charge a fee for this.
• Usually the request must be responded to within 40 days.
• Public awareness of data protection rights is growing rapidly, resulting in an increasing number of subject access requests being made.
• Often these requests are not specific, purely requesting details of any information the Council holds, necessitating contact with the named officer for every registered database.