At Exeter University staff e-mail addresses and staff telephone numbers are contained on the University's web site. This information is accessable to anyone world-wide, such a process has been in operation for as long as the web site has been up and running and consent from staff has not consistently been obtained throughout the time. The Data Protection Office has advised that consent to staff details being placed on the web must be sought from existing staff, whilst an appropriate sentence could be added to staff contracts for new staff. Also, if information was sent out to all staff, consent could not be inferred from a non-response. Has anyone in the mailbase sought mass retrospective consent from staff? If so, how did you go about it? With something in the region of 3,000 staff members, it is an overwhelming task and any help/advice from someone who has completed or is tackling the task would be most appreciated. ---------------------- Lucinda Bennett Administrative Officer Registry, Room 159 University of Exeter Tel: 01392 263355 Northcote House Fax: 01392 263108 %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%