Data Protection Department

Freedom of Information (FOI) Act request ref: 01/FOI/24/6416 

Version Date: 12/06/2024

The Information Management Department have provided the following information.

1. The date when Devon and Cornwall police reported themselves to the Information Commissioner's Office for consistently breaching the regulatory requirement to provide data under GDPR

December 2018 

2. Information to show the variation in the number of data protection advisors over time, from the point of D&CP reporting themselves to the ICO through to today.

Taken from the Data Protection Compliance for Subject Access Requests (SARs) Recovery Plan – plan dated March 2023

The increase in funding for growth resulted in the

• recruitment of a second Senior Data Protection Advisor who started in April 2022.
• recruitment of four Advisors who started in May 2022
• current vacancies exist as of September 2022 for two full time 37 hours per week and one part time 30 hours per week

Updates 23 January 2023.

• Two team members left to move to internal roles, one Advisor started maternity leave at the end of December.
• One new external starter joined December 2022
• Two further external starters are joining this Team February 2023

Current vacancies exist as of February 2023 for one full time 37 hours per week and one part time 30 hours per week.

Updates 11 April 2024

Currently no vacancies. The current number of staff in the Team is;

• 2 x Managers – full time
• 2 x Senior Data Protection Advisors – full time
• 8 x Advisors – full time
• 2 x Advisors – 30 hours per week
• 1 x Advisor – 22 hours per week

3. Data to show the average time it takes to complete a GDPR request over time, from the point of D&CP reporting themselves to the ICO through to today.

We do not hold figures for individual forces therefore the below represents the average hours per Subject Access Report (SAR) for Devon & Cornwall and Dorset Police combined.