Privacy settings

LGO logogram

Review your privacy settings

Required cookies

These cookies enable the website to function properly. You can only disable these by changing your browser preferences, but this will affect how the website performs.

View required cookies

Analytical cookies

Google Analytics cookies help us improve the performance of the website by understanding how visitors use the site.
We recommend you set these 'ON'.

View analytical cookies

In using Google Analytics, we do not collect or store personal information that could identify you (for example your name or address). We do not allow Google to use or share our analytics data. Google has developed a tool to help you opt out of Google Analytics cookies.

Gloucestershire County Council (19 020 033)

Category : Other Categories > Other

Decision : Closed after initial enquiries

Decision date : 27 Mar 2020

The Ombudsman's final decision:

Summary: The Ombudsman will not investigate Mr B’s complaint that the Council breached data protection by disclosing personal information about him to a third party. This is because the Information Commissioner’s Office is the appropriate body to deal with his concerns.

The complaint

  1. Mr B complains the Council breached data protection by disclosing personal information about him to a third party.

Back to top

The Ombudsman’s role and powers

  1. We investigate complaints about ‘maladministration’ and ‘service failure’. In this statement, I have used the word ‘fault’ to refer to these. We must also consider whether any fault has had an adverse impact on the person making the complaint. I refer to this as ‘injustice’. We provide a free service, but must use public money carefully. We may decide not to start or continue with an investigation if we believe there is another body better placed to consider this complaint. (Local Government Act 1974, section 24A(6), as amended)
  2. We normally expect someone to refer the matter to the Information Commissioner’s Office (ICO) if they have a complaint about data protection. However, we may decide to investigate if we think there are good reasons. (Local Government Act 1974, section 24A(6), as amended)

Back to top

How I considered this complaint

  1. I considered Mr B’s complaint and the Council’s comments, and invited Mr B to comment on a draft of this decision.

Back to top

What I found

  1. Mr B says the Council disclosed personal information about his health to a third party without his consent. He says the Council breached his data protection rights in doing so.
  2. The ICO is the UK’s independent authority set up to uphold information rights. It promotes openness by public bodies and protects the privacy of individuals. It deals with complaints about public authorities’ failures to comply with data protection legislation. This includes wrongly disclosing personal information.
  3. There is no charge for making a complaint to the ICO, and its complaints procedure is relatively easy to use. Where someone has a complaint about data protection, the Ombudsman usually expects them to bring the matter to the attention of the ICO.
  4. The ICO is better placed than the Ombudsman to consider Mr B’s complaint. It can decide if the Council has wrongly disclosed information about Mr B. The ICO has much wider powers than the Ombudsman to act if it finds the Council has failed in its duties as a data controller. Mr B should therefore complain to the ICO because it is the appropriate body to deal with his concerns.

Back to top

Final decision

  1. The Ombudsman will not investigate Mr B’s complaint because the Information Commissioner’s Office is the appropriate body to deal with his concerns.

Back to top

Investigator's decision on behalf of the Ombudsman

Print this page