Health and Care Professions Council

The complainant requested information on employee standards and policies on personal data security. The Health & Care Professions Council (HCPC) provided much information but withheld some citing the exemptions under section 40(2) of the FOIA (third party personal data) and section 36 (prejudice to effective conduct of public affairs) as its basis for doing so. The Commissioner’s decision is that the HCPC has correctly applied the exemptions under section 40(2) and section 36(2)(c) and does not require the HCPC to take any steps.