I have been asked to review (for DPA purposes) a racist incident report
form. The form will include the collection of personal sensitive
information.
The form may be completed by a third party and not the data subject. I am
writing a DP Statement for the form and cannot get around how I deal with a
statement about processing the information with partners (Police etc) given
the data subject may not be aware. The simple answer is to get the data
subjects permission and include that aspect as part of the DPA statement.
Is there any specific crime and disorder legislation that permits
processing if the subject is not aware? Any other guidance in this respect
most gratefully received.
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
All archives of messages are stored permanently and are
available to the world wide web community at large at
http://www.jiscmail.ac.uk/lists/data-protection.html
If you wish to leave this list please send the command
leave data-protection to [log in to unmask]
All user commands can be found at : -
http://www.jiscmail.ac.uk/help/commandref.htm
(all commands go to [log in to unmask] not the list please)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
|