No. The secretary - hired by Bob - is an employee and neither a
controller
nor a data processor.
Sorry Ian, the secretary is an employee of the hospital in most cases.
By the way, some consultants do place their own employees into the
hospital to operate as secretaries. They are bound to use the
facilities provided for them, and if that includes an unsecured mail
room, how the plot thickens.
Duncan
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
All archives of messages are stored permanently and are
available to the world wide web community at large at
http://www.jiscmail.ac.uk/lists/data-protection.html
If you wish to leave this list please send the command
leave data-protection to [log in to unmask]
All user commands can be found at : -
www.jiscmail.ac.uk/user-manual/summary-user-commands.htm
(all commands go to [log in to unmask] not the list please)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
|