In my personal view, if you are keeping data on people and there is no
reasonable way of finding it, you are going against principle 6. The subject
has the right to ask what data you hold and you should process data in a way
that you can satisfy this right. The chances are that the subject is
unlikely to even know about all the departments in your organisation, let
alone which ones are likely to hold data.
Tony Smith
-----Original Message-----
From: Brenda Scourfield [mailto:[log in to unmask]]
Sent: Wednesday, January 16, 2002 3:31 PM
To: [log in to unmask]
Subject: Supplying information to locate data
Apart from the guidance to data subjects on the OIC site which mentions
that a Controller will need some information to locate data in a SAR, does
anyone have details of where this is stated in a more forceful way on the
OIC site ?
We have a SAR where the data user hasn't given any idea of even the dept he
thinks his data may be in and we want to quote something from the IC to
stress that we need this information in order to search.
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
If you wish to leave this list please send the command
leave data-protection to [log in to unmask]
All user commands can be found at : -
www.jiscmail.ac.uk/user-manual/summary-user-commands.htm
all commands go to [log in to unmask] not the list please!
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
If you wish to leave this list please send the command
leave data-protection to [log in to unmask]
All user commands can be found at : -
www.jiscmail.ac.uk/user-manual/summary-user-commands.htm
all commands go to [log in to unmask] not the list please!
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
|