Another one folks - thanks to the others for their replies.
Some of our systems have come up with different addresses for a SAR (helps
me with my DP Audit point though). Should we be asking the person making
the SAR to verify all addresses/dob or should we just be giving information
pertinent to the address given at the time of the SAR. Obviously if the
addresses are different, then the information is not accurate and the
individual can make a request to have this altered but if there is no unique
identifier we may be passing someone else's personal information on or is it
up to us as Data Controllers to verify the information with the individual?
Doreen Broom
Data Administrator
Scottish Borders Council
Council HQ
Newtown St.Boswells
Melrose
Borders TD6 0SA
Tel: 01835 824000
________________________________________________________________
This e-mail is privileged, confidential and subject to copyright.
Any unauthorised use or disclosure of its contents is prohibited.
The views expressed in this communication may not necessarily
be the views held by the Scottish Borders Council.
_________________________________________________________________
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
If you wish to leave this list please send the command
leave data-protection to [log in to unmask]
All user commands can be found at : -
www.jiscmail.ac.uk/user-manual/summary-user-commands.htm
all commands go to [log in to unmask] not the list please!
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
|