Especially since the data is likely to be sensitive data, and because you
are releasing it to a third party, I would ask for a signed contractual
authorisation form the student that the data may be released. It would be
wise to state the purpose for the release on the contractual release form.
My answer is based on pragmatism. You have to cover yourself and your
organisation, and protect the rights of the student.
Tim Trent - Consultant
Direct: +44(0)1344 392644 Mobile:+44(0)7710 126618
email: [log in to unmask]
<mailto:[log in to unmask]>
Marketing Improvement Limited, Abbey House, Grenville Place, Bracknell,
United Kingdom, RG12 1BP
http://www.marketingimprovement.com <http://www.marketingimprovement.com>
This message is for the intended addressee's use only. It may contain
confidential, proprietary or legally privileged information. No
confidentiality or privilege is waived or lost by any mis-transmission. If
you receive this message in error, please immediately delete it and all
copies of it from your system, destroy any hard copies of it and notify the
sender. You must not, directly or indirectly, use, disclose, distribute,
print, or copy any part of this message if you are not the intended
recipient. Any views expressed in this message are those of the individual
sender, except where the message states otherwise and the sender is
authorised to state them to be the views of any such entity.
-----Original Message-----
From: This list is for those interested in Data Protection issues
[mailto:[log in to unmask]] On Behalf Of J.Barrett-Murrer
Sent: Wednesday, December 03, 2003 5:42 PM
To: [log in to unmask]
Subject: [data-protection] Releasing sensitive personal data to a University
Visitor
The Open University processes disabled student allowance applications.
We have a student who is very unhappy because he has not qualified for all
the help he feels he is entitled. This is because he has not supplied all
the required medical evidence requested. He is now appealing to the
University Visitor. The Visitor has supplied the OU with a copy of the
student's complaint and the associated correspondence he has supplied to
back up his claim. However it is clear that the student not supplied the
Visitor with all the correspondence he has had with the OU concerning his
DSA application. We feel that the Visitor should have access to the whole
DSA file in order to make an informed decision.
Do we have to have the student's permission in order to release his file?
Janice
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
All archives of messages are stored permanently and are
available to the world wide web community at large at
http://www.jiscmail.ac.uk/lists/data-protection.html
If you wish to leave this list please send the command
leave data-protection to [log in to unmask]
All user commands can be found at : -
http://www.jiscmail.ac.uk/help/commandref.htm
(all commands go to [log in to unmask] not the list please)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
All archives of messages are stored permanently and are
available to the world wide web community at large at
http://www.jiscmail.ac.uk/lists/data-protection.html
If you wish to leave this list please send the command
leave data-protection to [log in to unmask]
All user commands can be found at : -
http://www.jiscmail.ac.uk/help/commandref.htm
(all commands go to [log in to unmask] not the list please)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
|