**********************************************************************
This e-mail is intended solely for the addressee and is strictly confidential. If you are not the addressee, please do not read, print, re-transmit, store or act in reliance on it or any attachments. Instead please e-mail it back to the sender and delete the message from your computer.
E-mail transmission cannot be guaranteed to be secure or error free and The Co-operative Bank accepts no liability for changes made to this e-mail (and any attachments) after it was sent or for viruses arising as a result of this e-mail transmission.
Any unauthorised reproduction, dissemination, copying, disclosure, modification, distribution and/or publication of this e-mail message is strictly prohibited.
The Co-operative Bank reserves the right to intercept any e - mails or other communication for permitted purposes in accordance with the current legislation which you send to, or receive from, any of the employees or agents of the Bank via Bank telecommunication systems. By so corresponding you also give your consent to the Bank monitoring and recording of any correspondence using these systems.
The Co-operative Bank p.l.c. is registered in England and Wales, number 990937. The registered office is at PO Box 101, 1, Balloon Street, Manchester, M60 4EP.
**********************************************************************
Dear All
I am hoping that some of you could help me to crystalise my thoughts on the
provision of emails as part of a Subject Access Request
I know that in the true spirit of a subject access requests if a company holds
any emails of which the subject is the subject (sorry for double use of the
word) then the email should be provided as part of the SAR.
Guidance from the IC says that there is no requirment to search every email on
the system looking for any emails pertaining to the subject as this would be
'disproportionate effort' however we are required to look where we would
reasonably expect there to be emails about the individual. In the case of an
employee this may be the Line Manager for example.
My question is do we have to search the content of every email of the line
manager looking for any instance of the subjects name and then to assess whether
that email is about the subject or just mentions them and then whether to
provide or is it sufficient to just search the 'subject line' on the email
looking for emails about the subject. I know this is what a lot of companies do
and it is what I wish to do but is it 'legal'?
Any pointers to somewhere that may clarify in codes of practice would be useful.
thanks
Ian Dean
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
All archives of messages are stored permanently and are
available to the world wide web community at large at
http://www.jiscmail.ac.uk/lists/data-protection.html
If you wish to leave this list please send the command
leave data-protection to [log in to unmask]
All user commands can be found at : -
www.jiscmail.ac.uk/user-manual/summary-user-commands.htm
(all commands go to [log in to unmask] not the list please)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
|