Hi Katharine,



If you're talking about GDPR compliance, you need a lawful basis for the processing of personal data, not the system you use to do the processing. For example, if you're requesting personal data to process a benefit claim, you need a lawful basis for using the personal data to process the benefit claim; the lawful basis is the same whatever system you use for the processing. You need to think about the activities/purposes for which you are using personal data, not the system you use in isolation.



Best wishes,



Claire



Claire Miller

Information Governance Manager & Data Protection Officer

Legal and Governance

Confidentiality: This email, its contents and any attachments are intended only for the above named. As the email may contain personal data, confidential or legally privileged information, if you are not the above named or the person responsible for delivery of the message to the above named or suspect that you are not the intended recipient, please delete or securely destroy any copies of the message and any attachments immediately and inform the sender of the error.



-----Original Message-----



From: The Information and Records Management Society mailing list <[log in to unmask]> On Behalf Of Katharine Schopflin

Sent: 24 September 2020 13:55

To: [log in to unmask]

Subject: Microsoft Teams - justification for processing



Thinking about MS Teams as a new means of processing personal data, I'm struggling to articulate why it is a necessary means to deliver services.



For example, if you process data as part of your Public Task to deliver services required in law, then why is using Teams justifiable and proportionate, rather than any existing technology?



I'm not suggesting that it isn't, but I would love to hear other people's ideas. It's always hard to say what software is 'for' when it is supplied as part of a package, rather than as a solution to a problem.



To view the list archives go to: https://www.jiscmail.ac.uk/cgi-bin/webadmin?A0=RECORDS-MANAGEMENT-UK

To unsubscribe from this list, send an email to [log in to unmask] with the words UNSUBSCRIBE RECORDS-MANAGEMENT-UK



For any technical queries re JISC please email [log in to unmask] For any content based queries, please email [log in to unmask]

[University of Central Lancashire]

Please consider the environment before printing



To view the list archives go to: https://www.jiscmail.ac.uk/cgi-bin/webadmin?A0=RECORDS-MANAGEMENT-UK

To unsubscribe from this list, send an email to [log in to unmask] with the words UNSUBSCRIBE RECORDS-MANAGEMENT-UK



For any technical queries re JISC please email [log in to unmask]

For any content based queries, please email [log in to unmask]