> Can anyone advise how such incidents may be best tackled in terms
> of policy, legality and procedure ?
The safest way is to ask the police to provide a completed ACPO
data protection indemnity form which states how provision of the
data will assist their enquiries (or how failure to provide will
prejudice), But remember provision of information is voluntary
and you should consider the rights of the individual concerned.
Clearly for serious incidents there may be a public interest in
disclosure but there would not necessarily be one for a minor
matter. For the latter it is worth asking the police whether
they have any objection to you asking the data subject for
permission to release the data - that is sometimes a useful test
of whether they are just fishing or have a genuine case.
John Hitches
John Hitches
Information Security Officer
and Data Protection Officer
Kingston University
Telephone 020 8547 7768
The views expressed are those of the individual and
not necessarily those of the university
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
All archives of messages are stored permanently and are
available to the world wide web community at large at
http://www.jiscmail.ac.uk/lists/data-protection.html
If you wish to leave this list please send the command
leave data-protection to [log in to unmask]
All user commands can be found at : -
www.jiscmail.ac.uk/user-manual/summary-user-commands.htm
(all commands go to [log in to unmask] not the list please)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
|