The ruling was made following a complaint by the young person, who has asked to remain anonymous, after he filed a GDPR (general data protection regulation) request to NYAS to find out how the service had dealt with his data.
The request revealed that his details had been shared with a solicitor without his consent.
After complaining to NYAS, the young person was told “that the legal basis for this processing was legitimate interest rather than consent”, a letter from the ICO to the complainant, seen by CYP Now, states.
However, the ICO ruled that NYAS had not complied with its data protection obligations in this case.
Register Now to Continue Reading
Thank you for visiting Children & Young People Now and making use of our archive of more than 60,000 expert features, topics hubs, case studies and policy updates. Why not register today and enjoy the following great benefits:
What's Included
-
Free access to 4 subscriber-only articles per month
-
Email newsletter providing advice and guidance across the sector
Already have an account? Sign in here
