Just bin refused info under the dpa concerning my self and my illness it was refused because the information contains a third party views on it and there permission cant be sought because they no longer work there iv had a look threw the act and its a bit hard to follow but can some make sence of this please i will copy and paste soon. But i think i can get round the consent by useing 4 b can you look and see what you think and p.m on this personal matter thanking you scott p.s i know the others names on document thats why names cant be blank out
(4)Where a data controller cannot comply with the request without disclosing information relating to another individual who can be identified from that information, he is not obliged to comply with the request unless—
(a)the other individual has consented to the disclosure of the information to the person making the request, or
(b)it is reasonable in all the circumstances to comply with the request without the consent of the other individual.
(5)In subsection (4) the reference to information relating to another individual includes a reference to information identifying that individual as the source of the information sought by the request; and that subsection is not to be construed as excusing a data controller from communicating so much of the information sought by the request as can be communicated without disclosing the identity of the other individual concerned, whether by the omission of names or other identifying particulars or otherwise.
(6)In determining for the purposes of subsection (4)(b) whether it is reasonable in all the circumstances to comply with the request without the consent of the other individual concerned, regard shall be had, in particular, to—
(a)any duty of confidentiality owed to the other individual,
(b)any steps taken by the data controller with a view to seeking the consent of the other individual,
(c)whether the other individual is capable of giving consent, and
(d)any express refusal of consent by the other individual.
(7)An individual making a request under this section may, in such cases as may be prescribed, specify that his request is limited to personal data of any prescribed description.
(8)Subject to subsection (4), a data controller shall comply with a request under this section promptly and in any event before the end of the prescribed period beginning with the relevant day.