Under the FOI Act I would like to know which users/customers/departments store data on your computer servers of which you are not the registered Data Controller of the data.
We have interpreted your request to cover personal or sensitive personal data as the definition of a data controller is defined in Section 1 of the Data Protection Act 1998 as follows;
“data controller means, subject to subsection (4), a person who (either alone or jointly or in common with other persons) determines the purposes for which and the manner in which any personal data are, or are to be, processed”
We may hold personal data that we are not the data controllers of that may be part of agency arrangements or commissioned services, such as libraries, for example. We do not store and classify information about those in a way that would answer the question without a manual review of all data files, which we have calculated would take well in excess of the 18 hours specified by Section 12 of the Freedom of Information Act – Cost of Compliance, and which is therefore considered exempt.