A subject access request is made to a Data Controller and covers all the
information held about that Data Subject by that Data Controller. If the
partner institution is a Data Controller in its own right (which seems
likely), then a separate subject access request to them would be required,
for any information they hold that you don't.
In the interests of good relations I feel that you may want (a) to explain
this to the Data Subject in responding to their request and (b) consider an
arrangement with your partner institution where you both agree explicitly to
waive any subject access fee for the second request when the data sets are
so closely related. I wouldn't go as far as treating the access request as
a single request to both organisations, since that could open up a lot of
unnecessary complication.
Paul Ticher
0116 273 8191
22 Stoughton Drive North, Leicester LE5 5UB
I hereby require any recipient of this message not to use my personal data
for direct marketing purposes.
----- Original Message -----
From: "Caroline Dominey" <[log in to unmask]>
To: <[log in to unmask]>
Sent: Monday, January 08, 2007 11:16 AM
Subject: Partner Institutions
Hello,
I'm hoping that someone can give me a bit of advice. I have received a
Subject Access Request from a student based at one of our partner
institutions. We validate the degrees awarded by the partner
institution. Does the request just cover information held by us or does
it also cover information held by our partner institution?
If anyone has any experience of dealing with similar requests I would be
interested to hear how the requests were treated.
Many thanks in advance
Caroline Dominey
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
All archives of messages are stored permanently and are
available to the world wide web community at large at
http://www.jiscmail.ac.uk/lists/data-protection.html
If you wish to leave this list please send the command
leave data-protection to [log in to unmask]
All user commands can be found at
http://www.jiscmail.ac.uk/help/commandref.htm
Any queries about sending or receiving messages please send to the list
owner
[log in to unmask]
Full help Desk - please email [log in to unmask] describing your
needs
To receive these emails in HTML format send the command:
SET data-protection HTML to [log in to unmask]
(all commands go to [log in to unmask] not the list please)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
All archives of messages are stored permanently and are
available to the world wide web community at large at
http://www.jiscmail.ac.uk/lists/data-protection.html
If you wish to leave this list please send the command
leave data-protection to [log in to unmask]
All user commands can be found at http://www.jiscmail.ac.uk/help/commandref.htm
Any queries about sending or receiving messages please send to the list owner
[log in to unmask]
Full help Desk - please email [log in to unmask] describing your needs
To receive these emails in HTML format send the command:
SET data-protection HTML to [log in to unmask]
(all commands go to [log in to unmask] not the list please)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
|