That details of access requests will be recorded is implicit in applying
S.8(3) - follow-on requests. Appropriate retention periods depend on the
nature of the data provided - e.g. marketing might need a shorter timescale
than social services.
If data has to be edited in line with exemptions and third party
restrictions prior to disclosure, it could be useful to retain a copy of any
edited material in order to ensure a) consistency of future disclosure and
b)to justify the nature of the editing in the event of a dispute.
If there is a need to gather data from various sources, the memos/e-mails
which catalogue this will need to be added to the data subject record in
order to keep it complete. One SAR was followed by a letter asking "and is
that really all you've got about me?". The honest answer was: "yes, except
for our internal communications needed to gather all the information to
fulfil your initial request. If you really want to see these, you can, but
they don't add anything to what has been provided already". Sadly, this
might get you into a never-ending loop, should you decide to play ball...
regards
Su
Su Goulding
Data Protection Analyst
tel: 020 7330 3491
mobile: 07767 674376
[log in to unmask]
======================================================================
This email is confidential and may also be privileged. If you are not the intended recipient please notify us immediately by telephoning +44 (20) 7330 3000 and requesting the IT Helpdesk. You should not copy it or use it for any purpose nor disclose its contents to any other person.
Allen & Overy
One New Change
London
EC4M 9QQ
Tel:+44 (20) 7330 3000
Fax: +44 (20) 7330 9999
General Email: [log in to unmask]
www: http://www.allenovery.com
Allen & Overy is a solicitors' partnership. A list of the names of partners and their professional qualifications is open to inspection at the above office. The partners are either solicitors or registered foreign lawyers.
======================================================================
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
If you wish to leave this list please send the command
leave data-protection to [log in to unmask]
All user commands can be found at : -
www.jiscmail.ac.uk/user-manual/summary-user-commands.htm
all commands go to [log in to unmask] not the list please!
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
|