Clare
Sch1 Part II Section 3 (a to d) of UK DPA98 outlines the min requirement.
Point d is a bit generic so you have to look back at the underlying EC
Directive 95/46/EC Articles 10 and 11. (10 covers data captured direct from
data subject 11 data through a third party)
Section 11 of DPA98 refers to the right to opt out from marketing so most
controllers tend to provide an opt out process on their forms. Opt-in
considerations for electronic communications.
Sensitive data if processing with the 'unambiguous consent' condition leads
you to declaration statements to permit processing being signed up to be
individuals. This tends to drive content clarity. An example in Insurance
would be DPA fairness and consent obligations in the relationship to
declarations associated with the Access to Medical Reports Act.
You also have to consider any overseas transfer positions.
Notices have to be designed in context of the product or services offerred
and the method of collection e.g. Paper, Web based, Phone etc.
Not easy.
Hope this assists
David Wyatt
----- Original Message -----
From: <[log in to unmask]>
To: <[log in to unmask]>
Sent: Monday, March 10, 2003 9:55 AM
Subject: [data-protection] Notification
> Can anyone guide me as to what needs to be included in the Data Protection
> Notification to the data subject, when collecting their personal details.
>
> I appreciate we need to inform the data subject as to how and why their
data
> will be processed. Also, we need to ensure there is transparency
regarding
> the use of their data.
>
> However, out of interest do general statements need to be included? For
> example, "We will not keep data longer than is necessary" and "You are
> entitled to a copy of all of the information we hold about you".
>
> Any comments/thoughts please.
>
> Clare
>
> Clare Bond
> Compliance Officer
> Allianz Cornhill
> Finance Division
> Tel: +44 (0) 1483 552887
> Fax: +44 (0) 1483 552946
> Email: [log in to unmask]
>
>
>
>
> ************************************************************
> Copyright in this message and any attachments remains
> with us. It is confidential and may be legally privileged.
> If this message is not intended for you it must not be read,
> copied or used by you or disclosed to anyone else. Please
> advise the sender immediately if you have received this
> message in error.
>
> Although this message and any attachments are believed
> to be free of any virus or other defect that might affect
> any computer system into which it is received and opened
> it is the responsibility of the recipient to ensure that
> it is virus free and no responsibility is accepted by
> Allianz Cornhill Insurance plc for any loss or damage in
> any way arising from its use.
>
> Cornhill Life, Cornhill Direct and Allianz Global Risks
> are trading names of Allianz Cornhill Insurance plc.
>
> Petplan and DBI are part of the Allianz Cornhill group of
> companies.
>
> Allianz Cornhill Insurance plc, Registered in England
> number 84638. Registered Office: 57 Ladymead, Guildford,
> Surrey GU1 1DB.
>
> Allianz Cornhill Insurance plc is regulated by the
> Financial Services Authority.
>
> Member of the General Insurance Standards Council for
> general insurance business.
> ************************************************************
>
> ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
> All archives of messages are stored permanently and are
> available to the world wide web community at large at
> http://www.jiscmail.ac.uk/lists/data-protection.html
> If you wish to leave this list please send the command
> leave data-protection to [log in to unmask]
> All user commands can be found at : -
> www.jiscmail.ac.uk/user-manual/summary-user-commands.htm
> (all commands go to [log in to unmask] not the list please)
> ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
All archives of messages are stored permanently and are
available to the world wide web community at large at
http://www.jiscmail.ac.uk/lists/data-protection.html
If you wish to leave this list please send the command
leave data-protection to [log in to unmask]
All user commands can be found at : -
www.jiscmail.ac.uk/user-manual/summary-user-commands.htm
(all commands go to [log in to unmask] not the list please)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
|