I have recently had a response from the DPCO clarifying the position re
confidential references, where the data controller (in this case a
university) is not only the giver but also the receiver of the
reference. They advise that personal references are exempt from subject
access while they remain in the hands of the data controller. They
confirm that all information contained in confidential references given
by the University or by its staff acting on behalf of the University are
exempt from subject access.
Heads of Department will gain some comfort from this!
Nadine
--
**********************
Nadine Cleaver GCGI
PA to Vice-Chancellor
University of York
Tel (01904) 432001 (General Enquiries)
Tel (01904) 434461 (Development Office/Data Protection Co-ordination)
Fax (01904) 432003
***********************
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
|