Chris Spray on 18 June 2004 at 09:17 said:-
> but it has recently been suggested
> to me that
> this is not adequate - e.g. third parties to whom data has
> been disclosed
> should be named
Similar thoughts had occurred to myself when attempting to respond in a
manner which would preclude further enquiry by the data subject.
Including a copy of any associated user rules/guidance, if up to date,
should more or less fully answer all questions which might arise, but was at
the time I refer to above clearly not an option.
For the public sector, now FOI is beginning to work, I imagine those user
documents would be available, and is a route for data subjects to take
should they so wish to fully understand the context and meaning of the
information they have received.
Ian W
> -----Original Message-----
> From: This list is for those interested in Data Protection
> issues [mailto:[log in to unmask]] On Behalf Of
> Chris Spray
> Sent: 18 June 2004 09:17
> To: [log in to unmask]
> Subject: Re: SAR Format
>
>
> My prefered approach to s. 7(1(b)) is also to send a copy of the
> notification particulars, but it has recently been suggested
> to me that
> this is not adequate - e.g. third parties to whom data has
> been disclosed
> should be named (even though the Act specifically refers to giving a
> description of "classes of recipients"). What do others do?
>
> Chris
>
>
>
>
>
>
> Ian Welton <[log in to unmask]>@JISCMAIL.AC.UK> on
> 17/06/2004 17:17:55
>
> Please respond to Ian Welton <[log in to unmask]>
>
> Sent by: This list is for those interested in Data
> Protection issues
> <[log in to unmask]>
>
>
> To: [log in to unmask]
>
> Subject: Re: [data-protection] SAR Format
>
>
> Ben Cawley on 17 June 2004 at 15:49 asked:-
>
> > there anyone out there who organizes the information into a
> > report? And
> > if so what format does the report take?
>
> The volume and complexity of the data, together with time and
> cost issues
> provide some constraints. (e.g. it is possible to deal with
> 10 sheets in a
> different way to 10 reams.
>
> The data has to be provided in a form intelligible by the
> data subject and
> should include an interpretation of any codes, TLA's, field
> or other none
> obvious meanings. For compliance with s.7(1(b)) a copy of
> the relevant
> notification particulars would be included.
>
> Ben Cawley on 17 June 2004 at 16:02 asked:-
>
> > So what if information was held
> > electronically in a relational database. How would you extract the
> > information and how would it be presented?
>
> Very sadly, even after 20 years of DP few computer
> applications seem to be
> delivered with compliant DP SAR production functionality.
> Makes one wonder
> why.
>
> I used to provide a copy of each of the available printouts
> (where some of
> the data was not printable a screen dump sufficed.) and
> maintained a set of
> field codes and other abbreviations which enlarged as time went by or
> practices changed, for each application.
>
> I am not aware if any organisation use any of the RBDMS
> interrogation tools
> to produce the material. I personally never came across
> that. Possibly
> the
> cost of the tools were generally seen as an unnecessary cost to the
> organisations function.
>
>
> Ian W
>
> > -----Original Message-----
> > From: This list is for those interested in Data Protection
> > issues [mailto:[log in to unmask]] On Behalf Of
> Ben Cawley
> > Sent: 17 June 2004 15:49
> > To: [log in to unmask]
> > Subject: SAR Format
> >
> >
> > Just a quick question to all you poor souls who have to deal with
> > Subject Access Requests. Are you in anyway suppose to (or
> > expected to)
> > format the data you return to the data subject in a
> presentable manner
> > or do you just return the data as is (after redaction of
> course). Is
> > there anyone out there who organizes the information into a
> > report? And
> > if so what format does the report take?
> >
> > Thanks for any information in advance!
> >
> > Ben
> >
> > ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
> > All archives of messages are stored permanently and are
> > available to the world wide web community at large at
> > http://www.jiscmail.ac.uk/lists/data-protection.html
> > If you wish to leave this list please send the command
> > leave data-protection to [log in to unmask]
> > All user commands can be found at : -
> > http://www.jiscmail.ac.uk/help/commandref.htm
> > (all commands go to [log in to unmask] not the list please)
> > ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
> >
>
> ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
> All archives of messages are stored permanently and are
> available to the world wide web community at large at
> http://www.jiscmail.ac.uk/lists/data-protection.html
> If you wish to leave this list please send the command
> leave data-protection to [log in to unmask]
> All user commands can be found at : -
> http://www.jiscmail.ac.uk/help/commandref.htm
> (all commands go to [log in to unmask] not the list please)
> ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
>
>
>
>
> http://www.rac.co.uk
> http://www.racbusiness.co.uk
> http://www.bsm.co.uk
>
> Any opinions expressed in this e-mail are those of the
> individual and not necessarily the company. This e-mail and
> any attachments are confidential to RAC and/or BSM and are
> solely for use by the intended recipient.
>
> If you are not the intended recipient you must not disclose,
> copy or distribute its contents to any other person nor use
> its contents in any way.
> If you have received this e-mail in error please forward a
> copy of this e-mail to "[log in to unmask]".
>
> RAC Motoring Services: Registered England 1424399
> VAT Reg No. GB 238640945
> British School of Motoring: Registered England 291902
> VAT Reg No. GB 239505847
> Registered Office(s): 1 Forest Road, Feltham, TW 13 7RR
>
> This e-mail and any attachments has been scanned for the
> presence of computer viruses. RAC/BSM accept no
> responsibility for computer viruses once this e-mail has been
> transmitted.
>
> ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
> All archives of messages are stored permanently and are
> available to the world wide web community at large at
> http://www.jiscmail.ac.uk/lists/data-protection.html
> If you wish to leave this list please send the command
> leave data-protection to [log in to unmask]
> All user commands can be found at : -
> http://www.jiscmail.ac.uk/help/commandref.htm
> (all commands go to [log in to unmask] not the list please)
> ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
>
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
All archives of messages are stored permanently and are
available to the world wide web community at large at
http://www.jiscmail.ac.uk/lists/data-protection.html
If you wish to leave this list please send the command
leave data-protection to [log in to unmask]
All user commands can be found at : -
http://www.jiscmail.ac.uk/help/commandref.htm
(all commands go to [log in to unmask] not the list please)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
|