Ben Cawley on 10 June 2005 at 16:24 said:-
> Because organisations (councils in particular it seems) have so many
> data sources to search through either manual or electronic
> means, I was
> wondering if the situation where a data-subjects turn round
> and say "You
> havent given me information X that I know you keep", occurs
> and if there
> are processes in place to safe-guard against it, that sort of thing.
Large sets of data holdings spread around an organisation seem to be
generally more flexible and acceptable to many organisational departments
than centralised databases with suitable CoPs and controlled access levels
to particular sub-sets of data.
The users seemed to perceive that provides them with more flexibility in
decisions affecting themselves and data subjects. A consequential problem
which frequently results in more localised interests (or poor
administration/actions/decisions) overriding data subjects privacy when it
suits the user(s) interests.
Centralised or decentralised, the interests of a data controller generally
seem to ignore DP and other legislation when necessary, or when the
perceived risks to the data controller is low. Risks to data subjects seem
to be rarely considered in the rush to get the tick in the box.
Ian W
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
All archives of messages are stored permanently and are
available to the world wide web community at large at
http://www.jiscmail.ac.uk/lists/data-protection.html
If you wish to leave this list please send the command
leave data-protection to [log in to unmask]
All user commands can be found at : -
http://www.jiscmail.ac.uk/help/commandref.htm
Any queries about sending or receiving message please send to the list owner
[log in to unmask]
(all commands go to [log in to unmask] not the list please)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
|