Gerry's suggestion might protect the interests of a referee at the expense of a data subject, by imposing a long delay, and it wouldn't tackle the question of whether it "is reasonable in all the circumstances to comply with the request without the consent of the other individual". So it seems to me it would be neither good practice nor DPA-compliant!
Paul
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
If you wish to leave this list please send the command
leave data-protection to [log in to unmask]
All user commands can be found at : -
www.jiscmail.ac.uk/user-manual/summary-user-commands.htm
all commands go to [log in to unmask] not the list please!
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
|