Dear All,
My HR section have requested my approval of the following statement:
"From time to time xxx may process Personal Data and sensitive Personal
Data about you which is covered by the Data Protection Act 1998 for
administration and business management purposes. Processing will take place
in accordance with the provisions of the Data Protection Act 1998. By
signing this contract you acknowledge that you are providing xxx with
consent to these uses.
It is your responsibility to ensure that where, in the course of your
employment with xxx, you process data covered by the Data Protection 1998,
you comply with this legislation."
Initially I thought it was fine, but now I wonder whether it removes the
individual's right to give explicit and informed consent to sensitive
personal data. I realise the Act allows HR sections to process certain
sensitive data in the course of their work (eg sickness records) but is
this statement a step too far? I also wonder about the terminology "your
responsibility to ensure" with no reference to the employer providing
training/guidance etc - or am I being too picky?
Comments would be most welcome.
Thanks
Moira
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
All archives of messages are stored permanently and are
available to the world wide web community at large at
http://www.jiscmail.ac.uk/lists/data-protection.html
If you wish to leave this list please send the command
leave data-protection to [log in to unmask]
All user commands can be found at : -
www.jiscmail.ac.uk/user-manual/summary-user-commands.htm
(all commands go to [log in to unmask] not the list please)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
|