It is do-able and could arguably constitute processing covered by Section 33(1) of the Act ('researching' possible new systems to process the organisation's work?) - however, a comprehensive agreement would absolutely need to be in place to cover the demo. This would need to address -
- data ownership (data belongs to the organisation in raw and processed forms, the vendor has no claim whatsoever to the data or any such metadata as might be produced in the demo and/or the preparatory work for it)
- hard boundaries (demo system to be ringfenced as far as technically possible - hosted on the organisation's IT infrastructure if possible, data to be processed solely for the purposes of the demo and will not result in any exporting of data or metadata outside of the demo system)
- processing geographical limitations (data not to be processed outside the EU or any states not covered by the appropriate EU approvals) and
- post-demo deletion / destruction (all data supplied for the purposes of the demo, all 'end-product data' and any metadata resulting from demo to be completely and irrevocably deleted / destroyed)
as minimum requirements.
Any vendor worth their salt should have no problem in principle or practice signing up to these.
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
All archives of messages are stored permanently and are
available to the world wide web community at large at
http://www.jiscmail.ac.uk/lists/data-protection.html
If you wish to leave this list please send the command
leave data-protection to [log in to unmask]
All user commands can be found at http://www.jiscmail.ac.uk/help/commandref.htm
Any queries about sending or receiving messages please send to the list owner
[log in to unmask]
Full help Desk - please email [log in to unmask] describing your needs
To receive these emails in HTML format send the command:
SET data-protection HTML to [log in to unmask]
(all commands go to [log in to unmask] not the list please)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
|