> Ensure that the data processor agreement includes issues such as
> 'dark sites' (back up/disaster recovery/archive sites) which the
> data processor operates, and requires the processor to consult the
> controller before any move which affects the controllers data.
Ian's very valid point could, of course, also apply to direct
arrangements between a data controller and a supplier of back up
facilities. All normal processing may be done in-house but with a
contract for back up from a contract processor in the event of
business interruption by fire, flood etc.. Such contracts would
need data protection clauses.
John Hitches
J F Hitches
Data Protection Officer and
Information Security Officer
Kingston University
River House
53-57 High Street, Kingston upon Thames
Surrey, KT1 1LQ
Telephone/Fax: 020 8547 7768
E-mail: [log in to unmask]
The views expressed are those of the individual and
not necessarily those of the university.
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
If you wish to leave this list please send the command
leave data-protection to [log in to unmask]
All user commands can be found at : -
www.jiscmail.ac.uk/user-manual/summary-user-commands.htm
all commands go to [log in to unmask] not the list please!
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
|