Subject Access Requests are dealt with centrally. If a Subject Access
Request is received for 'confidential information' (e.g. held by Student
Advice Centres) there is a potential conflict of interests. The Central
Data Protection Office wanting to 'screen' the information for mention of
third parties etc, and the Advice Centre wanting to release all the
information directly to the Subject due to their confidentiality policy.
Has anyone got a system for dealing with this?
Caroline
------------------------------
Caroline Dominey
Data Protection & Planning
[log in to unmask]
01392 263033
------------------------------
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
All archives of messages are stored permanently and are
available to the world wide web community at large at
http://www.jiscmail.ac.uk/lists/data-protection.html
If you wish to leave this list please send the command
leave data-protection to [log in to unmask]
All user commands can be found at : -
http://www.jiscmail.ac.uk/help/commandref.htm
(all commands go to [log in to unmask] not the list please)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
|