Tim,
the problem is that some of the information is ONLY available on the
backup tapes - e.g. web access logs that have since been overwritten,
copies of emails that were in transit at the time, etc.
If my employer holds this personal data and is holding it for a notified
purpose (e.g. monitoring or investigation of alleged misuse) then it is
surely reasonable for the data subject (me) to have this information
disclosed on request.
Dave
At 09:14 AM 3/24/00 +0000, you wrote:
>> 2. How the hell do I provide full disclosure when asked to, when a lot of
>> the relevant personal data is spread all over the system in obscure log
>> files and on numerous backup tapes?
>
>I think there is an element of reasonableness here. If the information is
>not available without disproportionate effort (of course, I don't want to be
>the test case for this!), then it needn't be provided - at least I think
>that's how it works!! All computer systems are backed up (well, they should
>be, at least). If you have to correct some data, it is not reasonable imho
>to expect you to correct all the backups as well. Similarly with disclosure.
>
>--
>Tim Wright
>IT Security Manager
>Fuji Bank, London
>
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
|