** Reply to note from Adrian Tribe <[log in to unmask]> Thu, 08 Apr 1999 08:25:02 +0100
> Having asked this question on the data-protection list and
> received no replies I thought I would try it here:
>
> I wonder if someone can help me.
> I am researching the application of the Data Protection
> Act 1984 (and 1998) to the use of the Web by UK universities,
> and have come across references to a "proforma for registration
> of X.500 directory services within universities" on at least one
> DP Register entry.
Hi,
[Sorry for posting to the DP List as well as Website ...]
I could have answered you on the DP list but since you are getting
nowhere here goes.
First explain that my knowledge of x500 is rather vague.
Second, X500 allows you to publish personal details (eg. people's names,
EMail addresses etc I do not know how far you can go).
I have come accross no proforma as such apart from the standard form that
is used to register whatever under the DP Act. Where matters in my mind
get complicated is not so much on the form or registration procedure, but
on what you actually have to register.
a. Are you going to use the X500 internally? (ie. in an intranet).
b. Are you going to allow access to it via the www for anyone/everyone to
see?
Assuming that you want (a), you have to register. As long as the
details the X500 providea are work related and necessary for the
running of the "businees" there is no problem.
If you want (b) you have a much bigger problem.
b1. Since Oct98 any new processing has to comply with the DPAct98.
b2. Employees details (in a work setting) are private to the employee
thus the company cannot disclose them.
b3. You may not publish on the WWW private details without *explicit*
permition by the employee.
What I am trying to say if you want an x500 dir may become more difficult
to use (there again I do not know how they work).
======================================================
Some people who are running X500 dirs from before Oct98 will have to fall
with point (b) above by Oct 2001. In the meantime they can run them but
they have to allow staff the option to unquestionably "opt out" of any
such service.
======================================================
To sum it up, I do not think you need a proforma registration "thing"
but I may be wrong on this count.
Regards
Charles
==============================================
Charles Christacopoulos, Secretary's Office, University of Dundee,
Dundee DD1 4HN, (Scotland) United Kingdom.
Tel: +44+(0)1382-344891. Fax: +44+(0)1382-201604.
WebDad of http://somis.ais.dundee.ac.uk/
Home of the Scottish Search Maestro http://somis2.ais.dundee.ac.uk/
Happily using OS2 Warp.
==============================================
cc: [log in to unmask]
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
|