Is anyone else still at work? This order allows someone other than the data subject to have an elected member request the data subject's sensitive personal data. I am a little concerned that it does not stipulate either of the following: 1) what the relationship between the data subject and this third party requestor should be; 2) that the processing undertaken by the elected member (or someone acting with their authority) in such cases should not include disclosure of the data subject's sensitive personal information to the third party who has made the request. Colette Healiss DP Admin IT Strategy and Regulation St Helens Council Town Hall Victoria Square Telephone 01744 456052 ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ All archives of messages are stored permanently and are available to the world wide web community at large at http://www.jiscmail.ac.uk/lists/data-protection.html If you wish to leave this list please send the command leave data-protection to [log in to unmask] All user commands can be found at : - www.jiscmail.ac.uk/user-manual/summary-user-commands.htm (all commands go to [log in to unmask] not the list please) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^