mysociety / whatdotheyknow-theme

The Alaveteli theme for WhatDoTheyKnow (UK)
http://www.whatdotheyknow.com/
MIT License
31 stars 26 forks source link

Consider the GDPR s17 RtE template provided by the ICO #1451

Open WilliamWDTK opened 1 year ago

WilliamWDTK commented 1 year ago

Can we use this to improve our own?

I was thinking that when #1418 is completed, I'd transfer our existing responses to the improved format, which would be a good option to otherwise review their content.

Lastly, you mentioned that it would be helpful to see a copy of the right to erasure template that the ICO’s own Info Access team use. I’ve attached it, just in basic Word document format. As I’m sure you appreciate, I need to say that it was drawn up for our internal purposes, is a working document, and using it doesn’t necessarily guarantee that you’re fully compliant - but I hope it’s useful to you as a reference, and please let me know if you have questions about it. As you probably know, but I can’t help saying, we have guidance here: Right to erasure | ICO. I’d advise that when you receive a request for erasure, you carefully consider the “When does the right to erasure apply?” section of the website guidance – when I was handling requests I was surprised by how many did not meet the criteria.

We’ll be proactively disclosing more of our templates soon, and can flag that with you when it happens. Let me know if there’s anything in particular you’re interested in seeing.

mdeuk commented 1 year ago

A copy of the template referred to is now on the team Google drive.

We already do a good bit of what this template covers - but there is certainly merit in looking at how others word things, and considering how we can adopt a more "user friendly" way of explaining what is, at times, quite a complicated matter.

Clear and simple explanations (aka plain english), and are of value to everyone, but are especially important for those who may have lower literacy levels.

Perhaps a question for our guru, @FOIMonkey: are we aware of any other "best practice" examples we can use as part of our consideration?