“(1) A data subject is entitled to obtain from the controller— (a) confirmation as to whether or not personal data concerning him or her is being processed, and (b) where that is the case, access to the personal data… (a) confirmation as to whether or not personal data concerning him or her is being processed, and (b) where that is the case, access to the personal data… (3) Where a data subject makes a request under subsection (1), the information to which the data subject is entitled must be provided in writing — (a) without undue delay, and (b) in any event, before the end of the applicable time period (as to which see section 54). [Note: the applicable period is one month]. (4) The controller may restrict, wholly or partly, the rights conferred by subsection (1) to the extent that and for so long as the restriction is, having regard to the fundamental rights and legitimate interests of the data subject, a necessary and proportionate measure to— (b) avoid prejudicing the prevention, detection, investigation or prosecution of criminal offences or the execution of criminal penalties; … (e) protect the rights and freedoms of others.” (5) Where the rights of a data subject under subsection (1) are restricted, wholly or partly, the controller must inform the data subject in writing without undue delay— (a) that the rights of the data subject have been restricted, (b) of the reasons for the restriction, (c) of the data subject's right to make a request to the Commissioner under section 51, (d) of the data subject's right to lodge a complaint with the Commissioner, and (e) of the data subject's right to apply to a court under section 167. (6) Subsection (5)(a) and (b) do not apply to the extent that the provision of the information would undermine the purpose of the restriction. (7) The controller must— (a) record the reasons for a decision to restrict (whether wholly or partly) the rights of a data subject under subsection (1), and (b) if requested to do so by the Commissioner, make the record available to the Commissioner.”
“the information that you have requested relates to a case that is still active. In these circumstances we are unable to proceed with your request in accordance with section 45(4)(b) DPA 2018 … because it would be likely to prejudice the ongoing proceedings. If you wish to pursue your request at the conclusion of the case, please contact us at the address below…”
“subject to appropriate redactions that relate to the protection of third-party data rights and legal professional privilege, the Defendant has provided the relevant documents to the claimant in a letter dated8 November 2019 . The Defendant will not restrict the provision of the relevant documents by reference to the exemption under section 45(4) DPA 2018.”