CCAgenda_05Apr27 - Laserfiche WebLink

Home Browse Search

38 Section IV: Duties Relating to Right of Subjects The data subject has the right to ask and be told whether the entity maintains data about her/him, and whether those data are classified as public, private or confidential. To exercise this right, the subject must make a request to the responsible authority for the entity or to a designee as specified in the public document required pursuant to 13.05, subd. 1. The entity may require that the request be in writing, including by letter, facsimile and e-mail transmission, and may require the use of a form designed for this purpose. The entity may require the individual to provide identification in order to confirm that s/he is the subject of the data. Criteria for deciding whether to require written data requests, or the use of a form, include the process established by the entity for handling data requests, the frequency of requests, the magnitude of a request or requests, and the sensitivity of data requested. An entity requiring the use of a form must design the form so that it complies with the requirements described in this section, and must establish how it will provide guidance to the data subjects in using the form. The entity must respond to such a request immediately, if possible, or within ten working days. Response includes informing the individual that s/he is the subject of data maintained by that entity and how those data are classified. It is important to note that, even though individuals cannot access confidential data about themselves, they do have the right to know whether • confidential data are maintained by the entity. The data subject has the right to see all public and private data about her/himself. To exercise this right, the subject must make a request to the responsible authority, or the appropriate designee, as specified by the entity. The entity may require that the request be in writing, and may require the use of a form for this purpose as discussed above. The entity may require the individual to provide identification in order to confirm that s/he is the subject of the data, and may require staff to be present at inspection in order to physically protect the data. The entity must let the subject view the data immediately, if possible, or within ten working days of receiving the request, excluding Saturdays, Sundays and legal holidays. Inspection times and locations may be reasonably limited. If the subject has requested data that are not accessible to him/her, the entity must inform the individual of this fact at the time of the request, and must cite the specific section of state or federal law that gives the entity the authority to withhold the data from the subject. The data subject is entitled to see all public and private data which the entity maintains about him or her, but is not entitled to gain access to private or confidential data about other people which may appear in the records or files. The entity is required to determine what information • relates to which person so that it may lawfully comply with requests for access to the data. The July, 2000 Model Policy: Access to Government Data & Rights of Subjects Data