In a message dated 24/08/2000 17:21:33 GMT Daylight Time, [log in to unmask] writes: << You should not need consent for internal processing, storing etc. Putting material on your website, ouh ehhh ehmmmmm, as long as the staff have been clearly informed if they do not object you can do (pure DP says that you must have express consent). Now, I am a little more skeptical that because we could come to some arrangement to publish data on our web site, we could jist hand it over to be published on some other site. Then we are not in control of that data. Watch out that whatever you do your staff are individually and clearly informed and they have the right to object. Watch out that the Head of department does not send you the information and the academics are never told. >> ---------------------------------------------- It is a dangerous road travelled by the person who says consent is not needed for internal processing. Confucius he say: "Process not the information excessive to the purpose for which the data is given." In other words, if the detail given by the academics is in relation to their post at the Uni, other information about their achievements may be excessive and therefore consent to process would be required under Schedule 2. To transfer the data all over the world (see Principle 8) would need the explicit, informed (and in my view written) consent of the individual. Most academics I know would definitely consent to this worldwide free publicity, provided it puts them in a good light, so getting them to put their monicker on a piece of paper should be a piece of cake. And just think how much better you'd sleep at night. Ian Buckland MD Keep IT Legal Ltd %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%