We are apparently required by law to report details of accidents to students at residential school (to a body whose name I can't remember!). The information will inevitably include sensitive (health) data but whilst the reports do not necessarily have to contain personal data, we wish to retain the personalised record in case of civil claims. Other HEIs must have the same issue in respect of students on site. Do you obtain explicit consent and if so how? I'm assuming 'vital interest' doesn't arise. What about the position where consent is sought and refused (likely if the accident arises from some embarrassing incident!)? Gail Waters DP Coordinator OPen University ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ If you wish to leave this list please send the command leave data-protection to [log in to unmask] All user commands can be found at : - www.jiscmail.ac.uk/user-manual/summary-user-commands.htm all commands go to [log in to unmask] not the list please! ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^