I'm a new poster to this list, although I have followed your discussions
with interest over the last few months.
I work for a public affairs company, which, as a matter of course, maintains
detailed information on MPs, Council Chief Executives, local councillors and
civil servants and the like. We process this information to inform their
public affairs (lobbying) activities. The information is taken from public
sources (e.g. media) and some personal contact with the people, so is all
completely above board and we strive to be 100% accurate all the time in
order not to get sued!
I'm trying to find out what we need to do in order to comply with the DP
Act, as I gather from the DPR that we do not need to register as a data
controller, but have to be prepared to comply with subject access requests.
What does this mean in practice?
Over to the experts!
Bradley Rogers
GPC
Four Millbank
London
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
|