From my point of view the one place where the post should not be placed is within the IT Division - and I say that with a background of over 30 years in IT. There is an unfortunate tendency amongst some people to equate records, data and information with IT when we all know that many (a majority?) of the information we deal with is stored and processed manually. I agree with Graham Smith that it depends on the job function. Personally I report to the Chief Legal Officer and I think that is the right place to be as my role is a regulatory one. Regards, Graham ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ All archives of messages are stored permanently and are available to the world wide web community at large at http://www.jiscmail.ac.uk/lists/data-protection.html If you wish to leave this list please send the command leave data-protection to [log in to unmask] All user commands can be found at : - http://www.jiscmail.ac.uk/help/commandref.htm (all commands go to [log in to unmask] not the list please) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^