>Just thinking about how you would handle a collection which contains a
mixture of >personal and non-personal data makes me glad not to be a public
authority DPO.
I think FoIA will be a help rather than a hindrance. The effect of the
Durant case was to say that unstructured data don't have to be included in
response to a SAR, rather than saying that those data must not be included.
There never has been anything to stop a Data Controller continuing to
include unstructured data if they wish to. Indeed, in cases where
accessible public records are concerned (and most requests we receive are
for Social Services records) Durant made no difference whatsoever.
Regards,
Graham
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
All archives of messages are stored permanently and are
available to the world wide web community at large at
http://www.jiscmail.ac.uk/lists/data-protection.html
If you wish to leave this list please send the command
leave data-protection to [log in to unmask]
All user commands can be found at : -
http://www.jiscmail.ac.uk/help/commandref.htm
Any queries about sending or receiving message please send to the list owner
[log in to unmask]
(all commands go to [log in to unmask] not the list please)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
