I have had a request for disclosure of personal data about a student who
may be studying here by a Police Force.
I received this by fax and would ask colleagues for your comments please
Despite filling out the DP Form which is fine, how can I prove that it
came from whom it said? There is no proof that the person's signature
who is requesting is correct and the counter signature is also
unreadable and the box where the person's name should be entered is
empty. The person also failed to tick the box to explain what the info
was needed for. Obviously I am writing to request a top copy and some
proof (?) and reason for request.
If I am satisfied with the identity of the request I expect to release
simply that yes or no the student is enrolled here for xxx period but
not provide an address or phone details. Or does this depend on the
severity of the enquiry in hand , do we decide how helpful we wish to be?
What have others done in this situation?
Many thanks in advance of your input
Sally
--
Sally Justice
Data Protection Officer
Computer Services Department
London South Bank University
Borough Road
London SE1 0AA
Tel: 020 7815 6509 | lsbu.ac.uk/dpa/
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
All archives of messages are stored permanently and are
available to the world wide web community at large at
http://www.jiscmail.ac.uk/lists/data-protection.html
If you wish to leave this list please send the command
leave data-protection to [log in to unmask]
All user commands can be found at : -
http://www.jiscmail.ac.uk/help/commandref.htm
(all commands go to [log in to unmask] not the list please)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
|