What do you think is an appropriate retention period for the data my office
collates in order to deal with subject access requests? These are increasing
and with the inclusion of manual data, the amount of material is quite
substantial (& which is itself subject to subject acess!)
As we in efect duplicate information to send to the individual, would it be
appropiate to retain the file for 6 months after our response had been sent
and just to keep a note of the name and action taken?
Gail Waters
DP Coordinator
Open University
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
If you wish to leave this list please send the command
leave data-protection to [log in to unmask]
All user commands can be found at : -
www.jiscmail.ac.uk/user-manual/summary-user-commands.htm
all commands go to [log in to unmask] not the list please!
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
|