Surely the extent of rigour in verification should depend on the type of personal data involved, ie be proportionate. Personal data of a very personal and private nature might require more precautions than ordinary stuff.
Also, does not verification take place at two levels: (1) is the person writing to me really Joe Bloggs and (2) if he is, is he the same Joe Bloggs as the one this personal data is about? You need to be sure that you provide data not just to Mr Bloggs but to the right Mr Bloggs.
Susan Healy
Information Policy and Legislation
The National Archives
Tel 020 8392 5330 ext 2305
Email [log in to unmask]
www.nationalarchives.gov.uk
---------------------------------------------------------------------------------
National Archives Disclaimer
This email message (and attachments) may contain information that is confidential to The National Archives. If you are not the intended recipient you cannot use, distribute or copy the message or attachments. In such a case, please notify the sender by return email immediately and erase all copies of the message and attachments. Opinions, conclusions and other information in this message and attachments that do not relate to the official business of The National Archives are neither given nor endorsed by it.
------------------------------------------------------------------------------------
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
All archives of messages are stored permanently and are
available to the world wide web community at large at
http://www.jiscmail.ac.uk/lists/data-protection.html
If you wish to leave this list please send the command
leave data-protection to [log in to unmask]
All user commands can be found at : -
http://www.jiscmail.ac.uk/help/commandref.htm
Any queries about sending or receiving message please send to the list owner
[log in to unmask]
(all commands go to [log in to unmask] not the list please)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
|