>In a message dated 30/10/2001 12:14:02 GMT Standard Time,
>[log in to unmask] writes:
>
><< We have now had our first SAR from a student who wants every bit of data we
> hold (joy). He has also kindly sent us a fairly blurred 'photo, which he
> expects us to use to identify images of him from CCTV footage and then
> supply him with copies. The effort involved in this would be huge and the
> accuracy questionable! Also we only keep tapes for 7 days (unless an
> incident is reported) so what dates should we be looking at??? >>
>------------
>Imagine the police were seeking this individual, say for helping with their
>enquiries into a crime such as car theft. If they supplied just a photo of
>the person you'd quite rightly tell them it's impossible.
>
>If they gave you a date and time, and that date and time was within the last
>seven days, you might be able to help.
>
>Likewise with the SAR, details of where the subject was, on what date and at
>what time, would be needed before you can even start to search the tapes.
I don't agree. Just imagine if I went to a credit reference agency asking
for an SAR and they replied "tell us exactly which bits of our database you
are in". The data subject probably has no idea what cameras are around
and when his/her image might have been captured by one. It is reasonable
under such circumstances for the data subject to ask the controller to
supply everything they have without being more specific on time/place.
Professor Charles Oppenheim
Dept of Information Science
Loughborough University
Loughborough
Leics LE11 3TU
Tel 01509-223065
Fax 01509-223053
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
If you wish to leave this list please send the command
leave data-protection to [log in to unmask]
All user commands can be found at : -
www.jiscmail.ac.uk/user-manual/summary-user-commands.htm
all commands go to [log in to unmask] not the list please!
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
|