By the way, the "Minor"(!!!!!!) Security incident must now be over 'coz the
website is now up. I have, of course, changed my password. But the site is
still wide open, really.
The banner on the home page remains, of course, but you may now subscribe,
if you ignore it, and may doubtless receive email stuff from them.
It does perturb me that it doesn't TELL me I've subscribed, though.
I see only two valid approaches to opt in lists:
1) The system automatically emails the alleged subscriber with all the data
submitted and all changes to the data. Subscriber MUST enter a password.
2) Fuller security where the system sends a token by email which allows
confirmation of subscription. Password is a matter of course and may be
system generated. System then has no need to act as (1) above
The UKIC system is neither of the above.
-----Original Message-----
From: This list is for those interested in Data Protection issues
[mailto:[log in to unmask]] On Behalf Of Charles Christacopoulos
Sent: Monday, February 02, 2004 12:10 PM
To: [log in to unmask]
Subject: Re: [data-protection] Inattentive Commissioner e-mail alert service
** Reply to note from Nick Clark <[log in to unmask]> Mon, 2 Feb
2004 09:37:26 -0000
> According to the Privacy & E-comms guidance, an e-mail address in the
> form [log in to unmask] is personal data and therefore dp
> regulations apply.
Any email address whether it shows the name of the person concerned or not
is like to be personal data. If is personal data if you know the person it
belongs to or if you may come accross information that identifies that
person and so on (generic email addresses my be seen as non personal data,
eg.
[log in to unmask]
Privacy and E-comms guidance is wrong :-)
Charles
==============================================
Charles Christacopoulos, Management Information Officer, Planning &
Information, University of Dundee, Dundee, DD1 4HN, Scotland, United
Kingdom. Tel: 44(0)1382-344891. Fax: 44(0)1382-348845.
http://www.somis.dundee.ac.uk/
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
All archives of messages are stored permanently and are
available to the world wide web community at large at
http://www.jiscmail.ac.uk/lists/data-protection.html
If you wish to leave this list please send the command
leave data-protection to [log in to unmask]
All user commands can be found at : -
http://www.jiscmail.ac.uk/help/commandref.htm
(all commands go to [log in to unmask] not the list please)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
All archives of messages are stored permanently and are
available to the world wide web community at large at
http://www.jiscmail.ac.uk/lists/data-protection.html
If you wish to leave this list please send the command
leave data-protection to [log in to unmask]
All user commands can be found at : -
http://www.jiscmail.ac.uk/help/commandref.htm
(all commands go to [log in to unmask] not the list please)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
|