Pallas27

An ICO Case Officer has stated that an expemption does not necessaily have to be quoted to the data subject when data is whithheld and/or shared without consent. Is this lawful? Opinions welcome especially if you can back it up with a link. Many thanks.