If it is for them to pursue their role to identify possible criminal activity(fraud), CSA have a proper form quoting s29 of the DPA which we action on receipt. If we don't receive the "correct paperwork" from them we do not release (unless of course the submit an DDO or an Information Sharing Agreement exists) before I would be prepared to release the information (in the absence of course of a Information Sharing Agreement). Steps still must be taken to ensure security no matter who they are.
Many thanks
Regards
trish
Trish Bailey
Information Governance
Telford & Wrekin Council
Civic Offices, PO Box 59
Telford, TF3 4WZ
www.telford.gov.uk
em: [log in to unmask]
tel: 01952 382535
mb: 07528 969455
-----Original Message-----
From: This list is for those interested in Data Protection issues [mailto:[log in to unmask]] On Behalf Of M Sarah Wickham
Sent: 30 January 2009 09:39
To: [log in to unmask]
Subject: Child Support Agency - third party request for personal information
Dear colleagues
Apologies for cross-posting. We have received a request as follows:
================
[log in to unmask]
Hi
Received E.-Mail.
Could you please confirm that ABCD Date of Birth NN/NN/1970, N.I. NWxxxxxxD
is a student at University of Huddersfield.
Thankyou
xxx xxx
Sne Mos Nc Empl WG1 TM2
788xxxxx
================
We have not (apparently) dealt with the CSA before, so I have two concerns
here.
1. It is my understanding that the Child Support Agency has extensive powers
to obtain information. However, I would normally expect information about the
requester's formal source of authority to make the request. The email does
not do this - at least in an intelligible form.
For example, in the case of police requests, we require formal documentation
which in the case of West Yorkshire Police's form includes a counter-signatory
from a higher officer. Similarly, we require the Student Loans Company to
include a copy of their certificate of authority as per the Social Security Fraud
Act 2001 (s3(1)) Code of Practice on Obtaining Information.
2. The Child Support Act 1991 and associated regulations that I have
(cursorily!) had a look at concerning the supply of personal information seem
to apply to employers, local government, benefits agency etc - ie bodies via
which a non-resident parent may be receiving income. Obviously the
University does not have this kind of relationship with a student.
So my initial reaction is to go back to the requester, and ask for his formal
source of authority to make the request. Before I do this, though, am I
missing something?!
Many thanks
Sarah
M Sarah Wickham, MA, MA, Registered Practitioner
University Records Manager
University of Huddersfield
+44 (0)1484 473 935
http://www.hud.ac.uk/cls/recordsmanagement/
http://www.linkedin.com/in/msarahwickham
Please don't print this e-mail unless you really need to.
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
All archives of messages are stored permanently and are
available to the world wide web community at large at
http://www.jiscmail.ac.uk/lists/data-protection.html
If you wish to leave this list please send the command
leave data-protection to [log in to unmask]
All user commands can be found at http://www.jiscmail.ac.uk/help/commandref.htm
Any queries about sending or receiving messages please send to the list owner
[log in to unmask]
Full help Desk - please email [log in to unmask] describing your needs
To receive these emails in HTML format send the command:
SET data-protection HTML to [log in to unmask]
(all commands go to [log in to unmask] not the list please)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
--------------------------------------------------------------------------------------------------------------------
This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom
they are addressed. If you have received this email in error
please notify the originator of the message.
Any views expressed in this message are those of the individual
sender, except where the sender specifies and with authority,
states them to be the views of Telford & Wrekin Council.
The content of this email has been automatically checked in
conjunction with the relevant policies of Telford & Wrekin Council.
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
All archives of messages are stored permanently and are
available to the world wide web community at large at
http://www.jiscmail.ac.uk/lists/data-protection.html
If you wish to leave this list please send the command
leave data-protection to [log in to unmask]
All user commands can be found at http://www.jiscmail.ac.uk/help/commandref.htm
Any queries about sending or receiving messages please send to the list owner
[log in to unmask]
Full help Desk - please email [log in to unmask] describing your needs
To receive these emails in HTML format send the command:
SET data-protection HTML to [log in to unmask]
(all commands go to [log in to unmask] not the list please)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
|