 |
 |
Krissy Welsh <[log in to unmask]> wrote: >In terms of Third Party data where consent may need to be >sought to disclose certain information, is this then included in >the 40 day period? I'm sure I have read somewhere that the >40 days for this particular data does not start until consent has >been received. This would seem to be covered by paragraph 7(8) of the Act which (to me at least) states that the period of obtaining consent is not part of the prescribed period as without the consent it would be a question of either witholding the data under section 7(4)a or releasing it under 7(4)b. If 7(4)b is being used I would think the data has to be supplied within 40 days. If 7(4)a is being used then such data as can be released without the consent of the third party should be released within the 40 day period to comply with 7(5). John Hitches John Hitches Information Security Officer and Data Protection Officer Kingston University Telephone 020 8547 7768 The views expressed are those of the individual and not necessarily those of the university %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%