Take the following scenario,
I own an institution and have recently employed a system which involves a questionnaire/feedback form which gives the new starters the ability to give feedback on their experience settling in and other areas of the institutions. The questionnaire/feedback form in question is strictly confidential and they are allowed to request to see it and update their answers anytime they feel. The feedback forms will be held by the administration team, roughly 2/3 people who manage all the office work.
My question is as follows,
Who (according to the law) is allowed to access these feedback/questionnaire form or is that up to institution?
Is there anything else in regards to the DPA that needs to be considered?
The paper copies will eventually be turned in to digital copies through Google Forms so in terms of security they will have that covered.