Are they not a Data Processor within the meaning of the DP Act? They act as
a subcontractor to you, surely?
-----Original Message-----
From: Stewart Page [mailto:[log in to unmask]]
Sent: 19 September 2002 15:23
To: [log in to unmask]
Subject: Auditors Access to Personal Data
Does anyone have any guidance on the following:-
Currently, we have auditors in checking our accounts and pensions records.
The independent auditor has requested our HR department for access to two
named individuals pension records to confirm we are not paying dead
pensioners.
As DP Officer, I have advised HR that they cannot show these records to the
auditor, as 1) they do not have a legal right to access personal data. 2)
they are not named as a data recipient, and 3) I susspect this is only a
'fishing trip' exercise.
Does anybody else have a view, and is the guidance given correct.
Stewart Page
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
All archives of messages are stored permanently and are
available to the world wide web community at large at
http://www.jiscmail.ac.uk/lists/data-protection.html
If you wish to leave this list please send the command
leave data-protection to [log in to unmask]
All user commands can be found at : -
www.jiscmail.ac.uk/user-manual/summary-user-commands.htm
(all commands go to [log in to unmask] not the list please)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
All archives of messages are stored permanently and are
available to the world wide web community at large at
http://www.jiscmail.ac.uk/lists/data-protection.html
If you wish to leave this list please send the command
leave data-protection to [log in to unmask]
All user commands can be found at : -
www.jiscmail.ac.uk/user-manual/summary-user-commands.htm
(all commands go to [log in to unmask] not the list please)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
|