Dear Group,
I have a data protection question. A nearby authority has started a
permit scheme at its household waste recycling centres to deter illegal
tipping by unscrupulous builders. The permit scheme records the person's
name, address, e-mail address, (for the electronic version) the car's
make, model, and registration. The electronic application form does not
contain a data protection statement or a clause on how the information
will be process. However, I know understand that the authority uses this
information to track whether unscrupulous builders are taking out numerous
permits to deposit their trade waste in a household site.
My questions are the following.
1.What is the penalty, if any, for the failure to have a statement on how
the data will be processed?
2. What is the penalty, if any, if an investigation is conducted to track
a person's applications? (DPP 2)
3. What are the requirements, if any, to tell the person that their
information is being used to investigate them? (DPP6)
4. Can all of the above be avoided because the authority can claim that
the information is ordinary personal data and hey, does it really matter?
After all, if you have nothing to hide, why worry about supplying your
information?
Lawrence W. Serewicz
Scrutiny Manager
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
All archives of messages are stored permanently and are
available to the world wide web community at large at
http://www.jiscmail.ac.uk/lists/data-protection.html
If you wish to leave this list please send the command
leave data-protection to [log in to unmask]
All user commands can be found at : -
http://www.jiscmail.ac.uk/help/commandref.htm
Any queries about sending or receiving message please send to the list owner
[log in to unmask]
(all commands go to [log in to unmask] not the list please)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
|