Perhaps the best advice is to ensure that all of your records are kept
at Iron Mountain's warehouse in Bow. Then you can bank the SAR fee, wait
for a few weeks and then write to the applicant enclosing a copy of the
BBC 's report about the current fire, explaining why it is impossible to
respond!!
Money for old rope..........
Happy Friday..........
(and just sent in jest, you lovely lovely lawyers at Iron Mountain)
Regards
Martin Hoskins
Data Protection Manager
T-Mobile (UK) Ltd
Hatfield Business Park
Hatfield, Hertfordshire AL10 9BW
+44 (0)7957 234585
+44 (0)1707 319056 fax
-----Original Message-----
From: This list is for those interested in Data Protection issues
[mailto:[log in to unmask]] On Behalf Of J.S.M.Whitaker
Sent: 14 July 2006 11:39
To: [log in to unmask]
Subject: Best practice handling of SARs
I've just recently been handling an SAR for a small organisation. Quite
a time-consuming (and hence expensive) operation. Fortunately it does
not get many.
If anyone has available to share what they consider to be good practice
in how a small (300 staff) but fairly complex organisation ought to
organise itself to deal with these effectively but at minimum cost, I
would be most interested. (Installing organisation-wide EDRMS is not an
option.)
Key areas of concern:
Email handling (Exchange and pst file based)
Good redaction tools (I find the Microsoft add-in for Word OK but not
wonderful)
Training resources for HR staff.
Regards
Jim
========================================================================
=
-----Original Message-----
From: This list is for those interested in Data Protection issues [
<mailto:[log in to unmask]>
mailto:[log in to unmask]] On Behalf Of Tony Bowden
Sent: Friday, July 14, 2006 11:12 AM
. . .
To bring this slightly more back on track for this list, isn't there a
parallel here with DPA? Without good systems in place for dealing with
SARs, organisations can spend a lot of time, energy, and money dealing
with each request. A well co-ordinated series of SARs could act as a DoS
attack to many companies.
The best way to handle this of course is to have wonderful integrated
systems where each SaR requires just a single mouse click for the
information to be collated, printed, and sent automatically to the
requestor!
. . .
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
All archives of messages are stored permanently and are
available to the world wide web community at large at
http://www.jiscmail.ac.uk/lists/data-protection.html
If you wish to leave this list please send the command
leave data-protection to [log in to unmask]
All user commands can be found at : -
http://www.jiscmail.ac.uk/help/commandref.htm
Any queries about sending or receiving message please send to the list
owner
[log in to unmask]
(all commands go to [log in to unmask] not the list please)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
All archives of messages are stored permanently and are
available to the world wide web community at large at
http://www.jiscmail.ac.uk/lists/data-protection.html
If you wish to leave this list please send the command
leave data-protection to [log in to unmask]
All user commands can be found at : -
http://www.jiscmail.ac.uk/help/commandref.htm
Any queries about sending or receiving message please send to the list owner
[log in to unmask]
(all commands go to [log in to unmask] not the list please)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
|