Original documentation is fine, but what if the DS lives at the other end of Britain (or even outwith) - are you really going to require them to send in the post?
Donald Henderson
Information Compliance Manager
Perth & Kinross Council
-----Original Message-----
From: This list is for those interested in Data Protection issues [mailto:[log in to unmask]] On Behalf Of Derek O'Connor
Sent: 05 March 2015 14:06
To: [log in to unmask]
Subject: Re: [data-protection] Original docs as proof of ID
Many thanks for all the comments.
I would accept an SAR electronically and respond electronically with the data (by secure means obviously) but would not accept proof of ID electronically.
I think all those who accept photocopies of ID (either electronically or otherwise) are taking a risk (calculated maybe, but still a risk) - photocopies could be easily tampered with and if it transpired that you disclosed information to someone not entitled to receive it you will likely incur the wrath of the ICO.
Original docs can be fraudulent I know - but you are not expected to spot a fake driving licence or passport and you can at least demonstrate that you have used your best endeavours to verify the ID of the requester.
I have a situation where a requester is refusing to provide original ID and only provide a photocopy which I won't accept for the reasons mentioned above.
Regards
Derek O'Connor
Rheolwr Llywodraethu Gwybodaeth / Information Governance Manager Cyngor Bwrdeistef Sirol CONWY County Borough Council E-Bost / E-Mail: [log in to unmask] Ffon/Tel 01492 574016
-----Original Message-----
From: This list is for those interested in Data Protection issues [mailto:[log in to unmask]] On Behalf Of Michael Bacon - Grimbaldus
Sent: 05 March 2015 12:18
To: [log in to unmask]
Subject: Re: [data-protection] Original docs as proof of ID
My clients are private sector. There are usually several points of verification, such as employee number and start/finish date, or an order number, delivery/billing address, contact telephone number for customers. It's a matter of how duly diligent one needs to be commensurate with the sensitivity of the data to be supplied.
I have always recommended photoID (practically essential for CCTV requests), a copy of the V5 document for CCTV of vehicle-involved incidents, and a utility bill (includes telcos and Sky) to confirm the address for supply. If the name and address on all the documents and the original SAR do not agree, the ID would not be acceptable ASIS.
Regards - Michael Bacon
Grimbaldus Limited
> On 5 Mar 2015, at 10:56, Andrew Goodfellow-Swaap <[log in to unmask]> wrote:
>
> I'm intrigued as to everyone's apparent willingness to accept photocopied ID documents without certification!
>
> Given the sensitive information that we disclose (often social care records) it is almost inconceivable to me that an, often poor, copy of a document (that we haven't seen and have no way of satisfying ourselves whether it actually is a true copy) would be considered to be sufficient to ensure that the person making the request is the person they are claiming to be.
>
> It seems almost a case of "I AM WHO I AM." (to refer to Lawrence's
> comment in another thread :) )
>
> Colour me surprised.
>
> Andrew Goodfellow-Swaap
>
> ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
> All archives of messages are stored permanently and are
> available to the world wide web community at large at
> http://www.jiscmail.ac.uk/lists/data-protection.html
> If you wish to leave this list please send the command
> leave data-protection to [log in to unmask] All user
> commands can be found at http://www.jiscmail.ac.uk/help/commandref.htm
> Any queries about sending or receiving messages please send to the list owner
> [log in to unmask]
> Full help Desk - please email [log in to unmask] describing your needs
> To receive these emails in HTML format send the command:
> SET data-protection HTML to [log in to unmask]
> (all commands go to [log in to unmask] not the list please)
> ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
All archives of messages are stored permanently and are
available to the world wide web community at large at
http://www.jiscmail.ac.uk/lists/data-protection.html
If you wish to leave this list please send the command
leave data-protection to [log in to unmask] All user commands can be found at http://www.jiscmail.ac.uk/help/commandref.htm
Any queries about sending or receiving messages please send to the list owner
[log in to unmask]
Full help Desk - please email [log in to unmask] describing your needs
To receive these emails in HTML format send the command:
SET data-protection HTML to [log in to unmask]
(all commands go to [log in to unmask] not the list please)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
-----------------------------------------
Mae'r neges e-bost hon ac unrhyw ymgysylltiadau yn gyfrinachol, ac wedi eu bwriadu ar gyfer yr un sy'n cael ei h/enwi yn unig. Gallent gynnwys gwybodaeth freintiedig. Ar gyfer yr amodau llawn ynglŷn â chynnwys a defnyddio’r neges e-bost hon ac unrhyw atodiadau, gweler www.conwy.gov.uk/ebost_ymwadiad
This email and any attachments are confidential and intended for the named recipient only. The content may contain privileged information. For full conditions in relation to content and use of this e-mail message and any attachments, please refer to www.conwy.gov.uk/email_disclaimer
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
All archives of messages are stored permanently and are
available to the world wide web community at large at
http://www.jiscmail.ac.uk/lists/data-protection.html
If you wish to leave this list please send the command
leave data-protection to [log in to unmask] All user commands can be found at http://www.jiscmail.ac.uk/help/commandref.htm
Any queries about sending or receiving messages please send to the list owner
[log in to unmask]
Full help Desk - please email [log in to unmask] describing your needs
To receive these emails in HTML format send the command:
SET data-protection HTML to [log in to unmask]
(all commands go to [log in to unmask] not the list please)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
Securing the future... - Improving services - Enhancing quality of
life - Making best use of public resources.
The information in this email is solely for the intended recipients.
If you are not an intended recipient, you must not disclose, copy,
or distribute its contents or use them in any way: please advise
the sender immediately and delete this email.
Perth & Kinross Council, Live Active Leisure Limited and
TACTRAN do not warrant that this email or any attachments are
virus-free and does not accept any liability for any loss or damage
resulting from any virus infection. Perth & Kinross Council may
monitor or examine any emails received by its email system.
The information contained in this email may not be the views of
Perth & Kinross Council, Live Active Leisure Limited or TACTRAN.
It is possible for email to be falsified and the sender cannot be
held responsible for the integrity of the information contained in it.
Requests to Perth & Kinross Council under the Freedom of
Information (Scotland) Act should be directed to the Freedom of
Information Team - email: [log in to unmask]
General enquiries to Perth & Kinross Council should be made to
[log in to unmask] or 01738 475000.
General enquiries to Live Active Leisure Limited should be made
to
[log in to unmask] or 01738 454600.
General enquiries to TACTRAN should be made to
[log in to unmask] or 01738 475775.
Securing the future... - Improving services - Enhancing quality of
life - Making best use of public resources.
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
All archives of messages are stored permanently and are
available to the world wide web community at large at
http://www.jiscmail.ac.uk/lists/data-protection.html
If you wish to leave this list please send the command
leave data-protection to [log in to unmask]
All user commands can be found at http://www.jiscmail.ac.uk/help/commandref.htm
Any queries about sending or receiving messages please send to the list owner
[log in to unmask]
Full help Desk - please email [log in to unmask] describing your needs
To receive these emails in HTML format send the command:
SET data-protection HTML to [log in to unmask]
(all commands go to [log in to unmask] not the list please)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
|