In a message dated 16/01/2002 15:31:08 GMT Standard Time,
[log in to unmask] writes:
<< We have a SAR where the data user hasn't given any idea of even the dept he
thinks his data may be in and we want to quote something from the IC to
stress that we need this information in order to search. >>
-------------
Whether you need further details will depend upon the circumstances. If, for
example, you have a server system with search facilities you might not need
anything else as all your data is in one location (effectively) anyway. That
search may indicate any departments which may also have manual data on this
person.
If all your systems are distributed (all departments run separate computer
systems) you should write back to the requestor asap and ask which
department(s) or function(s) are likely to have his information.
You might want to consider drafting a standard Subject Access Request Form on
which data subjects can tick the appropriate departments/systems.
Ian Buckland
MD
Keep IT Legal Ltd
Please Note: The information contained in this document does not replace or
negate the need for proper legal advice and/or representation. It is
essential that you do not rely upon any advice given without contacting your
solicitor. If you need further explanation of any points raised please
contact Keep I.T. Legal Ltd at the address below:
55 Curbar Curve
Inkersall, Chesterfield
Derbyshire S43 3HP
(Reg 3822335)
Tel: 01246 473999
Fax: 01246 470742
E-mail: [log in to unmask]
Website: www.keepitlegal.co.uk
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
If you wish to leave this list please send the command
leave data-protection to [log in to unmask]
All user commands can be found at : -
www.jiscmail.ac.uk/user-manual/summary-user-commands.htm
all commands go to [log in to unmask] not the list please!
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
|