“Any information which we may or may not hold in relation to this part of your request would be exempt underSection 40 of the Freedom of Information Act 2000 , which exempts personal data from disclosure where disclosure would breach the first data protection principle as set out in Article 5 of the General Data Protection Regulation which states: 1. 1. Personal data shall be 1. 1. Processed lawfully, fairly and in a transparent manner in relation to the data subject (‘lawfulness, fairness and transparency); Article 4 of the General Data Protection Regulation states that:- For the purposes of this Regulation: (1) ‘personal data’ means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;Section 40(5) of the Freedom of Information Act provides that there is no duty to confirm or deny whether we hold the information sought where even to confirm or deny would breach the rights of the person(s) who may be the subject of that information. Therefore, underSection 40(5) of the Act we neither confirm nor deny whether any such information is held by Bridgend County Borough Council. I am sorry on this occasion we have not been able to provide any further assistance. Therefore, to the extent set out above, this letter acts as a Refusal Notice in accordance withSection 17 of the Freedom of Information Act 2000 . If you are dissatisfied with the handling of the request, under theFreedom of Information Act 2000 you have the right to request a review of the Council’s response to your request for information. If you wish to request a review, please write to the below address or email foi@bridgend.gov.uk. Following ICO guidance, a request for a review must be made within 2 months of a response being received.”
“It is irrelevant whether the Appellant jointly owns the specified property; it does not change the analysis regarding the disclosure of personal data relating to the named individual. Furthermore the fact the Appellant has reported the alleged fraud to Action Fraud / South Wales police only serves to demonstrate that there are far less intrusive means of addressing such concerns, validating the Commissioner’s conclusion that it is not necessary to confirm or deny whether or not any information is held within the scope of the request to the world at large under FOIA.”