Print

Print


In a message dated 19/11/2001 19:58:35 GMT Standard Time,
[log in to unmask] writes:

<< All this proves is that you have copies of such documents, not that the
 person named on the document is you. Indeed, modern Birth Certificates
 specifically say on them that they are *not* proof of identity. >>
----------

There is no legal requirement to prove beyond doubt that the requester is the
data subject, just that you take *reasonable* measures to ensure the SAR does
not go to the wrong person.

As an example, say a University gives each student a reference number which,
if quoted in normal circumstances, would identify the individual for the
usual administration purposes.  If the Uni would answer normal queries based
on this ID number, why would they need any more than that for a subject
access request?

If a bank would be satisfied with account number, address, telephone number
and mother's maiden name for normal enquiries, why would they need a birth
certificate or driving licence for an SAR?

It's all a question of what is reasonable, if you require strong proof of ID
for an SAR then you also need it for normal enquiries and you should tighten
up your telephone disclosure policies.


Ian Buckland
MD
Keep IT Legal Ltd

Please Note: The information contained in this document does not replace or
negate the need for proper legal advice and/or representation. It is
essential that you do not rely upon any advice given without contacting your
solicitor.  If you need further explanation of any points raised please
contact Keep I.T. Legal Ltd at the address below:

55 Curbar Curve
Inkersall, Chesterfield
Derbyshire  S43 3HP
(Reg 3822335)
Tel: 01246 473999
Fax: 01246 470742
E-mail: [log in to unmask]
Website: www.keepitlegal.co.uk

^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
    If you wish to leave this list please send the command
       leave data-protection to [log in to unmask]
            All user commands can be found at : -
    www.jiscmail.ac.uk/user-manual/summary-user-commands.htm
all commands go to [log in to unmask] not the list please!
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^