 |
 |
> Now if you really want to make it difficult for the person asking, how do > they prove they are the same person as the one for whom they are asking > information. That sounds like a question straight out of the Criminal Records Bureau debate Charles. :-) Ian W. ----- Original Message ----- From: <[log in to unmask]> To: <[log in to unmask]> Sent: Wednesday, January 31, 2001 3:35 PM Subject: Re: 40 days or not 40 days that is t > ** Reply to note from Mitchell Alex <[log in to unmask]> Wed, 31 Jan 2001 15:24:30 -0000 > > > > ODPC guidance is: > > A Data Controller must comply with a subject access request promptly and in > > any event within 40 days of receipt of the request or, IF LATER, within 40 > > days of receipt of:- > > > > 1. the information required to check the identity of the person making the > > request and to locate the information requested AND > > > > 2. the fee > > I would go with the above and if there are delays I would not cash the > cheque. > > Now if you really want to make it difficult for the person asking, how do > they prove they are the same person as the one for whom they are asking > information. > > Charles > > ============================================== > Charles Christacopoulos, Secretary's Office, University of Dundee, > Dundee DD1 4HN, Scotland, United Kingdom. > Tel: +44+(0)1382-344891. Fax: +44+(0)1382-201604. > http://somis.ais.dundee.ac.uk/ > Scottish Search Maestro http://somis2.ais.dundee.ac.uk/