The data controller needs to obtain sufficient information to be able to
identify the individual and find the data requested, (Section 7(3)). If a
DOB is required for that it is not excessive.
Ian
----- Original Message -----
From: Data Protection Officer <[log in to unmask]>
To: MailBase (E-mail) <[log in to unmask]>
Sent: Wednesday, September 13, 2000 11:51 AM
Subject: Excessive information on Subject Access Request Forms
> Is it excessive to ask for Date of Birth on a Subject Access Request
Form??
>
> Thoughts!
>
> Fiona Campbell
> DP Officer
>
>
> _____________________________________________________________________
> This message has been checked for all known viruses by Star Internet
delivered
> through the MessageLabs Virus Control Centre. For further information
visit
> http://www.star.net.uk/stats.asp
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
|