Under the new Act an individual is entitled to be given a description of the
recipients or classes of recipients to whom personal data are or may be
disclosed.
Do you think this means a general description similar to what is provided
when data is obtained or does it mean details of actual disclosures
made(although it doesn't say "to whom personal data have been disclosed").
If the latter, it means we have to keep a detailed record which will be
quite onerous.
Gail Waters
Data Protection Coordinator
Open University
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
|