Under the Data Protection Acts, there are a few exemptions which entitle the data controller to withhold certain data from the data subject who makes the access request.
Redacting is the blacking out or removal of parts of the data that the data subject is not entitled to receive. Individual words, sentences or whole paragraphs can be blocked out if appropriate. If necessary, sections of a document or whole pages can be removed prior to the release of the document.
If, for example, data relates to an individual other than the data requestor, that data should not be disclosed. Any details that identify the third party should be redacted (unless consent from the third party has been given).
The data subject can appeal the redactions made. If required, Adjuro will furnish a report explaining the decisions taken by it with regard to the redactions made.
